Victor Vlasenko

@larixer

Maintainer of node_modules support at @yarnpkg, Founder of @sysgears, Ex cryptography department head at @BIFIT

Paphos, Cyprus

sysgears.com

Born August 14

Replies Reposts Media

Pinned
Victor Vlasenko
@larixer
Oct 9, 2024
I have started working on a tiny lockfile-less package manager for JavaScript: github.com/narijs/nari It implements bare-bones `node_modules` installs with workspace support. I am already using it for a couple of my open source packages `webpack-virtual-modules` and `mochapack`
github.com
GitHub - narijs/nari: A lockfile-less JavaScript package manager with reproducible installs
A lockfile-less JavaScript package manager with reproducible installs - narijs/nari
1
Victor Vlasenko
@larixer
Oct 14, 2024
It would be a great experiment if we appointed key maintainers with limited term powers to an open source project based on secure RNG (fair coin flipping) among the group of willing contributors. Contributors sense of ownership and user trust would increase in such a project.
Victor Vlasenko
@larixer
Oct 14, 2024
Automattic Is Doing Open Source Dirty youtube.com/watch?v=SLdwYl… I disagree with the author. I don't think Wordpress drama has serious risks for open source. Because the grounds for the drama is Trademark misuse (seems null and void legally), not open source license misuse.
Victor Vlasenko
@larixer
Oct 10, 2024
Lockfiles used in JavaScripts projects can be harmful from security and stability perspectives. You have machine generated data in your repository that is used for package manager decisions to download additional code. (1/4)
1
Victor Vlasenko
@larixer
Sep 14, 2022
What would be your stack now to write #NodeJS backend + which database to use?
1