he/him 
If you had to install an npm package by URL, instead of by registry name, would you mind? eg. $ npm install https://website.com/package.tgz $ yarn add https://website.com/package.tgz
Show this thread
-
ew, mutable package references. no please. whatever we move to, it should ensure immutability.
Definitely. There’s no way to fit that into the existing npm model though. This feels the closest. You can get immutability by being specific with an integrity hash on the end of the URL.
-
-
After the leftpad thing npm ensures immutability after a specific time period (a few hours if i recall) after publishing. Agree that the model itself, semver, doesn’t ensure immutability, but we have some guarantee through the existing central authority.
- 1 more reply
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.