Hacker News new | ask | show | jobs
by raoulj 1325 days ago
What is the reason to not have a central package index? I find that having one speeds up my development significantly. Is there more reason than decentralization?
2 comments

Decentralization is good.

I'm really not a fan of what has happened in the Rust community with crates.

The fact that there is a single blessed Rust crate source and the fact that the Rust community doesn't take responsibility for vetting crates means that maintainership changes, name squatting gold rush, and a whole host of pathological behaviors show up.

If you're not going to take responsibility, then the only option is to leave everything decentralized.

I don't know but hopefully there would be something like Go's module proxy, which can be replaced or turned off.

https://proxy.golang.org/