forums, mailing lists and other tools

Nikos Roussos comzeradd at fsfe.org
Thu Jan 18 12:31:49 UTC 2018


> On 18/01/18 12:14, Carsten Agger wrote:
> 
>> 2. However, I find containers to be black magic. How can you trust them
>> to be 100% free software if you don't build them yourself? I honestly
>> don't know if Debian's packaging model is a perfect fit for distributing
>> JavaScript, which is, I suppose, why people have come up with npm etc.
> 
> I don't think it is about whether Debian's model is perfect or not
> 
> Rather, it is about people taking one or more of the following shortcuts:
> 
> - they want to use build tools that don't exist in Debian because they
> are not free software (e.g. jslint, jshint)

FWIW, none of these are build tools. These are just linting tools, that people use regardless of the packaging/build. I'm personally using ESLint, which is MIT licensed.

> - they want to use other JavaScript libraries that are not free software

I understand you point in this thread in general, but using npm or not using Debian packages doesn't necessarily equals using non-free software.

> - they don't want to spend time on little things like creating a proper
> install directory for their files because they just hack on them in
> their web server directory

No developer touches a web server directory. At least not on a proper deployment workflow. This is why people use things like package.json and npm/yarn to describe dependencies in an server (and distribution) agnostic way. And then use something like Ansible for deployment.

> - maybe they don't even release or version their code because they just
> hack on it as they please

It depends. For instance projects like Discourse do version their code. If you are talking about a website, usually there is no need for versioning, especially if you are using a CI/CD workflow.


~nikos



More information about the Discussion mailing list