If the npm registry disappeared. How quickly could it be rebuilt? (Without the cooperation of npm inc). Is anyone still mirroring the registry? The migration away from couchdb and the registry software being closed source would make it difficult.
-
-
You’re allowed to distribute anything open source, so all the ones with explicit licenses you’re fine on. There’s good tooling for telling if a package has a proper license on it. A lawyer could tell you what the fair use case would be for hosting the other public data.
-
Last I checked there was a surprising amount of packages without explicit licenses. In fact, we had to add some logic to Yarn to infer the license field from a LICENSE file.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
he/him 