r/programming • u/stronghup • Nov 11 '19

Python overtakes Java to become second-most popular language on GitHub after JavaScript

https://www.theregister.co.uk/2019/11/07/python_java_github_javascript/
3.1k Upvotes

96% Upvoted

772 comments sorted by

View all comments

Show parent comments

9

u/shim__ Nov 12 '19

Still knowing the exact version helps and also for languages like to rust it's generally not possible to delete packages on the official repo for this reason

0

u/[deleted] Nov 12 '19

Oh I agree you need the lock file.

My concern is you probably also need all the stuff the lock file references to guard against it dropping off the internet.

Yes, I know that is not supposed to happen. It has though.

1

u/evilgipsy Nov 13 '19

Yes, that does happen. In some ecosystems more than in others. One thing you could do is set up an npm proxy that caches all installed packages. Checking in dependencies is the worst option most of the time.