Hacker News Reader

Comment by izacus | Hacker News Reader

Hmm, I Java world we pretty much always used a local (company-owned) Maven proxy server, which grabbed packages from public repos and cached them locally to make sure builds still work if public servers were down or slow... or packages disappeared.

This isn't a standard practice in JS world?

View on HN

I’ve worked at places where the Java devs used Maven Central directly. I’ve also worked at a place where the Node devs use an on-premises copy of dependencies for builds and deploys.

It might not be as standard a practice in the Java world as you think.

Where did those Java devs who pulled from Maven central directly publish their artifacts?

Possibly Sonarqube Nexus. The Java devs at my workplace use Sonarqube along with Jenkins and Maven on the same server. I believe they communicate through the shared directory on the file system.

(Pet peeve: another product named "Nexus". Please choose original names for your software.)

It's Sonatype Nexus, Sonarqube is the code quality checker.

It is at big orgs, but not small shops.

We do it even at home. Not full dep-server but local backup.

Yes, if your company has Artifactory or similar. I think most of these outraged folks are just memeing.

i use yarn-offline-mirror and save all tarballs in the repository, works fairly well.

We use Nexus at work and have linked up NPM to it along with several Maven repos. I don't know why anyone wouldn't do this if they were a business.

Yes, of course. A centralized repository for a package manager is always going to be a single point of failure.

Not "standard", but there's definitely a couple solutions for this. We tried one at my work but it seemed a bit flakey.

Yes, for those who use `yarn`. (Yarn's package caching looks a lot like Mavens)

yarn does local caching in developer laptops. What GP is referring to is having an on-prem private dependency server which acts as a cache and proxy to the centralized public dependency repo.

> an on-peen private dependency server

SURELY you meant on-prem, right?

yikes! yes, fixed. my default autocorrect language is not English, so I’ll just blame that.

Reply on news.ycombinator.com