Hacker News Reader

I mean, I strongly just feel the npm ecosystem is a dumpster fire of sadness. Though there is a fundamental difference in that if you use NPM, you are choosing to download packages from NPM. But if you specify a bunch of repos you want to download Go packages from, and you get them from Google anyways, that's pretty uncomfortable. Especially if Google is in turn also DDoSing the repos in return.

View on HN

No I did not "choose to download packages from NPM". Choosing means there is an alternative. And besides that the registry part is invisible in your package file (hardcoded default like GOPROXY).

If you look at it, it's pretty similar. The part before the first slash is invisible:

npmjs.com/org/package

proxy.golang.org/org.com/package

The difference with Go is that you can actually change the first part if you want, or even disable it.

Reply on news.ycombinator.com