Hacker News Reader

So the author has to use yum (a package manager), to install node's npm (a package manager), to install bower (a package manager "for the web") to install Vector...

wow

View on HN

My solution for npm is to use fpm to make rpms of node modules. But this is fucked by node modules pull in all their dependencies into their own tree, and because a module will want semvers > 3, but npm wants semvers < 2.2. Hence you can't make a sane package per node module, you have to have a module and all it's dependencies in one rpm. The best example I have seen was a module for imagemin that was 17mb, but if you took out the dependencies it was 5k.

For bower, I am not aware of a tool. My solution so far, since I have only have seen it get used when running a gulp compile is to have my co-workers run bower install in their repo, and put the results in the repo.

Welcome to the future!

A future with out signed packages is a scary future.

Reply on news.ycombinator.com