nicksnyder

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building a better, smarter foundation for software development to help you answer questions about your code. Our code search allows you to instantly search across all of your company's private code using powerful regular expressions, and our browser extension provides go-to-definition and find-references while you are looking at code in your browser on GitHub and other code hosts. Most of the developers at Uber, Lyft, and Yelp use Sourcegraph on a daily basis.

We are a small distributed team of mostly engineers who love to code. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Master plan: https://sourcegraph.com/plan Product roadmap: https://docs.sourcegraph.com/dev/roadmap Our code is open source: https://github.com/sourcegraph/sourcegraph Jobs page: https://github.com/sourcegraph/careers/

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building a better, smarter foundation for software development. Our code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.), and our browser extensions give you IDE-like code intelligence (e.g. hover tooltips, go to definition, find references, and more) while you are looking at code in your browser, on Sourcegraph, or on your code host. Software developers at big/recognizable companies around the world already love, use, and pay for our product on a daily basis.

We are a small distributed team of mostly engineers who love to code. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Master plan: https://sourcegraph.com/plan Product roadmap: https://docs.sourcegraph.com/dev/roadmap Our code is open source: https://github.com/sourcegraph/sourcegraph Jobs page: https://github.com/sourcegraph/careers/

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building a better, smarter foundation for software development. Our code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.), and our browser extensions give you IDE-like code intelligence (e.g. hover tooltips, go to definition, find references, and more) while you are looking at code in your browser, on Sourcegraph, or on your code host. Software developers at big/recognizable companies around the world already love and use our product on a daily basis.

We are a small distributed team of mostly engineers who love to code. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Our code is open source: https://github.com/sourcegraph/sourcegraph Product roadmap: https://docs.sourcegraph.com/dev/roadmap Master plan: https://sourcegraph.com/plan Jobs page: https://github.com/sourcegraph/careers/

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building a better, smarter foundation for software development. Our code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.), and our browser extensions give you IDE-like code intelligence (e.g. hover tooltips, go to definition, find references, and more) while you are looking at code in your browser, on Sourcegraph, or on your code host. Software developers at big/recognizable companies around the world already love and use our product on a daily basis.

We are a small team of mostly engineers who love to code. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Code: https://github.com/sourcegraph/sourcegraph Product roadmap: https://docs.sourcegraph.com/dev/roadmap Master plan: https://sourcegraph.com/plan Jobs page: https://github.com/sourcegraph/careers/

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building tools that software developers love and use on a daily basis. Our code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.). Our browser extensions give you IDE-like code intelligence (e.g. hover tooltips, go to definition, find references) while you are looking at code in your browser, on Sourcegraph, or on your code host.

We are a small team of mostly engineers who love to code, and we already have big/recognizable/global companies paying for our product. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Jobs page: https://github.com/sourcegraph/careers/

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building tools that software developers love and use on a daily basis. Code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.). Code intelligence gives you hover tooltips, find references, and jump to definition while you are looking at code in your browser on Sourcegraph or on your code host.

We are a small team of mostly engineers who love to code, and we already have big/recognizable/global companies paying for our product. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Jobs page: https://about.sourcegraph.com/jobs

> As the writer of an application I like the power of short-cutting that path if needed for an important update of a transitive dependency by simply telling my package manager to update the lockfile, vs having to wait for the update to trickle through the chain of dependencies.

MVS has this shortcut without requiring a lockfile. Just update the minimum version for that dependency in your own project.

This pain isn’t really about Renovate Bot. You can pretend that it doesn’t exist or that your project isn’t using it. I should still be able to update a single dependency without updating unrelated things.

Rephrased:

npm’s design incentivizes projects to assume “patch versions are safer to update than minor versions are safer to update than major versions” to avoid dependency duplication.

Such incentives do not exist with MVS because all that is required is a total ordering and there is no duplication within a major version of a module.

You can argue about what is more important for your project, but the worst part is that npm doesn't give project owners to decide otherwise.

As kjksf already stated, patch versions can introduce security vulnerabilities too.

NPM specially assumes that "patch versions are safer to update than minor or major version". MVS doesn't make that assumption.

> it seems to stem from bad design decisions made by NPM authors

Yep.

> doesn't have a lot to do with Minimal Version Selection

The pain I experienced has nothing to do with MVS (because npm doesn't use MVS). The observation of the post is that my pain would not have happened with MVS. No more, no less.

It doesn't happen automatically if you don't want it to (and it didn't happen automatically in this case).

The value here is that it notifies you if an update is available (by opening a pull request), automatically tests the new dependency (when CI runs on your pull request), and makes it easy for you to apply the update if you want (by merging the pull request).

It isn't an argument, it is just a fact. All else equal, it is a nice fact.

Renovate Bot didn't do anything special. It ran exactly the same npm command that I would have run on the command line (update the single dependency), which would have produced the exact same result.

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA or REMOTE

Sourcegraph is building tools that make software developers love and use on a daily basis. Code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.). Code intelligence gives you hover tooltips, find references, and jump to definition while you are looking at code in your browser on Sourcegraph or on your code host.

We are a small team of mostly engineers who love to code, and we have already have big/recognizable/global companies paying for our product. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Jobs page: https://about.sourcegraph.com/jobs

Sourcegraph (https://sourcegraph.com) | Software Engineer | San Francisco, CA | ONSITE or REMOTE

Sourcegraph is building tools that make software developers more productive on a daily basis. Code search allows you to instantly search across all of your company's private code to find what you are looking for (definitions, examples, error messages, etc.). Code intelligence gives you hover tooltips, find references, and jump to definition while you are looking at code in your browser on Sourcegraph or on your code host.

We are a small team of mostly engineers who love to code, and we have already have big/recognizable/global companies paying for our product. If you are passionate about making the world better through software, come join us!

Stack: Go, TypeScript, GraphQL, Docker + Kubernetes

Jobs page: https://about.sourcegraph.com/jobs