Hacker News new | ask | show | jobs
by bad_user 3955 days ago
GitHub is not meant for distributing dependencies. Maven Central on the other hand is, the difference being that it is mirrored and if repo1.maven.org goes down, it's not a big deal and your project can still be built and deployed.
1 comments

.. until they become a target of a DDoS.

Also, if GitHub is down you can still fetch your dependencies from somewhere else.

You have not understood the concept of 'mirrored'.
Well I guess all mirrors could get targeted. Also, what stops github from getting mirrors themselves?