undefined | Better HN

0 pointscortesoft7mo ago0 comments

Isn't this the same as ruby gems, then? You can use alternative sources in your Gemfile pretty easily.

0 comments

Sort of.

Go packages have the source baked into the package name. It would be like needing to say `require "github.com/sparklemotion/nokogiri"` rather than what we do today, `require "nokogiri"` and then if you want to change the source wrapping `gem "nokogiri"` in an alternate `source` block.

binary1327mo ago

This is why Go’s dependency management doesn’t really qualify as “decentralized” in my mind. A decentralized provider (IPFS?) could possibly be implemented for some packages, but most of its packages are locked into centralized hosting and URLs today. Some of them sometimes being hash-identified and cache-proxied doesn’t help the case much and IMO the centralized proxying by default actually hurts it.

madeofpalk7mo ago

Depends what you're trying to decentralise. Go has no centralised registry. The collective of all the packages are decentralised, but each individual package is centralised.

j / k navigate · click thread line to collapse

0 comments

zrail7mo ago

Sort of.

binary1327mo ago

madeofpalk7mo ago

Depends what you're trying to decentralise. Go has no centralised registry. The collective of all the packages are decentralised, but each individual package is centralised.

j / k navigate · click thread line to collapse