Hacker News Reader

Comment by smoyer | Hacker News Reader

To me, that looks like an angry unicorn ... does that mean it's another DDoS?

It would also be interesting to track loss of productivity in the software engineering professions when GitHub is down. Is this a single point of failure for your company?

View on HN

Not just for a company, but for developer productivity in general, professional or not...

Think of all the package managers that pull straight from Github repos as part of their installation processes..

Exactly ... we've got Ansible scripts that do that. One of the current Java rockstars (not my description), Adam Bien, recommends pulling the source code for all third-party dependencies to build them locally and put them in a local repository. I suppose you can push directly back upstream to avoid having an extra step.

For OS-level package management like Apt or Yum this is less of an issue, but for things like Composer, Gem, NPM and the like, is the concept of "closest available mirror" even a thing?

I guess for mission critical applications you could have a local mirror of all your vendor package dependencies (probably not a bad idea) but I would bet most people don't do that (I don't)..

If you're using Java most of the build tools use the Maven repositories, for which you can set up a local mirror too. The company i work for runs a Sonatype Nexus so we're not really affected by others' downtime unless we need stuff that we hadn't ever used before.

Yes, for our Java projects we have a Nexus repository which mirrors everything locally. It doesn't protect us from someone deleting a project ... then we're stuck on the last available version without a way to address issues, but it's worked pretty well so far.

It's just git you'd go and get the code from literally anywhere else its being used.

I was trying to run composer ... and many composer packages are hosted directly on GitHub. Also, issues, pull requests ...

Reply on news.ycombinator.com