Hacker News new | ask | show | jobs
by __MatrixMan__ 393 days ago
Having to think about docker's hashing/caching scheme and also pip's and also npm's and to apply them each separately in CI and in a local environment and in dev/stage/prod... for a large repo that's a lot of work. Easy to overlook whichever one you're less concerned about at the time and put the repo in some kind of inconsistent state where something works here but not there.

There's a lot to be said for having a single lockfile for all of them.

1 comments

No. It is not nearly as hard as you make it sound.

If I had to work with such mess of a project - I wouldnt bother with package managers at all. I just download and commit all dependencies to repo.

If dependencies are not supposed to change anyway - what is the point of downloading them from all over internet each time?