Re: Fedora 34 Change: Stop Shipping Individual Nodejs Library Packages (Self-Contained)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Dec 9, 2020 at 11:52 AM James Cassell
<fedoraproject@xxxxxxxxxxxxx> wrote:
>
>
>
> On Wed, Dec 9, 2020, at 1:44 PM, Ben Cotton wrote:
> > https://fedoraproject.org/wiki/Changes/NodejsLibrariesBundleByDefault
> >
> > == Summary ==
> >
> > For Nodejs, Fedora should only package:
> > * The interpreter, development headers/libraries, and the assorted
> > tools to manage project-level installations (NPM, yarn, etc.).
> > * Packages that provide binaries that users would want to use in their shell.
> > * compiled/binary nodejs modules (for now)
> >
>
> Better title would have been, "bundle all nodejs dependencies into binary packages requiring them".
>

Yes ... that does sound better.  Naming is hard.

> It feels contrary to the Minimization Objective. Is there really no better solution? Can modularity help here? Better packaging macros?
>

To me this sounds exactly in line with the Minimization Objective.
It can get rid of potentially 700 Fedora packages.  Minimizing the
number of packages needed to be installed as well as being built with.

> Is there really no better solution?

Not that we've found.  This isn't an off the cuff proposal, it was
months of discussion on mailling lists and off.
To be honest, this is really years in the making.  macros and scripts
were tried for years, making them better and better in hopes that it
would ease the problem.  When things finally started falling apart, we
really could say we'd tried all we could, but nothing was sustainable.

> Can modularity help here? Better packaging macros?

No, and No

> How will licensing of dependencies be verified?

Unlike most other languages, nodejs libraries contain a License field
in their package.json.
A simple 'find' script can get the licenses of your bundled packages.
Run that each time you update your package, putting the output in your
License: line of your spec.

> What happens when a project adds new dependencies?
Re-run your bundling script.
You should re-run it every time you do any update, pulling in the
correct and often updated nodejs libraries for your package.

Troy
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux