All dep systems w/ fuzzy matches also have .lock things to ensure repeatability. Fuzzy matches on a declarative manifests are just bad.
@brianleroux in a manually locked deps model, only you can lock your deps. If a dep locks its deps, "deduping" quickly becomes impossible.
-
-
@wycats I don't follow what you mean by this. Of course the author(s) can and do change their deps. You mean downstreams can't?Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@brianleroux and sometimes deduping is more than an optimization (shared core infrastructure like time or request types) -
@brianleroux iow if my lib asks for "latest 1.x of time" and your lib asks for "latest 1.x of time", an app that includes both gets one copy -
@brianleroux if both of us picked a specific version that happened to be the latest when we published, dups are inevitable. -
@wycats oh, well, the answer is the same as it is without fuzzy matching. don't do that. -
@brianleroux don't do what? -
@wycats The old I-have-two-versions-of-jQuery because reasons story. Don't do that. Don't depend on crap that does that. -
@brianleroux I'm talking about two libs that depend on a specific version of `time`. One of them returns a Time from a func. -
@brianleroux the problem arises because an app uses both (moment + time zone lib) - 10 more replies
New conversation -
-
-
@brianleroux maybe I'm moment.js and you're a TZ lib, and we want to share a Time class.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@wycats@brianleroux I really want control over npm sub dependencies. bower@1.4.0 behaves differentiate depending on when you installed it. -
@wycats@brianleroux as in breaking changes and short of going into the node_modules and replacing nested deps you're out of luck. -
@wycats@brianleroux maybe semver needs <package>@x.y.z@timestamp.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.
agree to disagree. My intent is repeatability not chasing errors.