Menu
Sign In Search Podcasts Charts People & Topics Add Podcast API Blog Pricing

Nicholas Zakas

๐Ÿ‘ค Speaker
455 total appearances

Appearances Over Time

Podcast Appearances

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

I think they got a lot of stuff right.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

But one of the challenges, again, like having a competitor to NPM is like, number one, you can't actually do quote unquote binaries like ESLint on JSR.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

You can't just say like JSR install ESLint and then just run ESLint.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

It doesn't work that way.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

And then two, any alternative to NPM needs to be compatible with NPM.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

Because unless you're able to use all of the packages just on that new registry, you're going to have to mix and match between NPM and that new registry.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

And that's also something that JSR just did not get right.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

If you try to use JSR packages in with NPM packages in a package that you want to publish, just straight up doesn't work.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

Because we tried to do this with one of our ESLint packages because...

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

The nice thing about JSR is Deno published a bunch of standard library-type packages on there, and they're really good.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

And so we wanted to use one in one of our packages, and it ended up being such a pain that we just copied the source code from the JSR package into our repo so we could package it and publish it up onto NPM.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

So that story was just not there at all.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

It was okay if you were just building an application that you were not going to be publishing to NPM.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

You're just going to be deploying.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

But then going and publishing that back to NPM just did not work at all.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

Yeah, I don't think so.

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

And part of the reason is,

The Changelog: Software Development, Open Source
Securing npm is table stakes (Interview)

it seems like a lot of developers are very skeptical of AI companies and providing data that can be used to train AIs.