Nix NodeJS | 202 Members | |
| 60 Servers |
| Sender | Message | Time |
|---|---|---|
| 22 Nov 2023 | ||
| i'm not sure i follow but also idk what npmlock2nix is, so i'll take your word for it | 16:47:12 | |
| it parses package-lock.json in pure nix code and can thus create its own FODs | 16:48:04 | |
| no need to maintain a separate hash out of band | 16:48:13 | |
| oh, yeah i was gonna have that too for the nixpkgs stuff soon. someone called it terrible though so i haven't, uh, come back and pushed it yet | 16:49:13 | |
| napalm, floco and the new buildNpmModule stuff do it as well | 16:49:32 | |
| as does (I believe) dream2niz | 16:49:51 | |
| * as does (I believe) dream2nix | 16:49:58 | |
| it was part of a bigger restructure of lockfile parsing and fixup, which will also allow dealing with busted lockfiles in nixpkgs without just having to generate your own and vendor it | 16:50:04 | |
| I see, nice ☺️ | 16:50:36 | |
| if you could use any help with that let me know | 16:50:54 | |
| i mean if you know rust and want to help, i wish i had someone to collab with, because it's hard when it's just me and most people like shitting on node stuff anyway and calling reproducibility "terrible" | 16:51:31 | |
| I do know Rust and I halfway know the lockfile format from working on npmlock2nix | 16:52:51 | |
| that was all v1 though | 16:53:00 | |
| yeah we support all v1-3 lockfiles rn (which v1 is shit though and often has incomplete dep graphs store in their lockfiles....) | 16:53:38 | |
| yes, v1 is shit | 16:53:59 | |
| npmlock2nix only barely supports v2 and does not support v3 at all | 16:54:25 | |
| idk i'd rather work on pnpm stuff at this point, but that's because the more i look into it, the more actually sane it looks (yaml lockfiles aside) | 16:54:45 | |
| I think it's dead or dying now because of this | 16:54:45 | |
| well, my usecase is packaging already existing stuff. and that stuff usually has package.json and package-lock.json | 16:55:24 | |
| if yarn or pnpm can work with those, then sure why not | 16:55:57 | |
| what prevents projects from moving from a yarn v1 to a v2 lockfile? | 19:51:18 | |
| at the moment I feel like yarn projects are at risk in nixpkgs | 19:52:01 | |
| I packaged a custom package with buildNpmPackage and the package.json has a main entry.
the first path /nix/store/9x13vrsbm8rb78x8mhrcb72ysza14llz-jkops-1.0.0/lib/node_modules/jkops/node_modules/@aws-sdk/util-utf8-browser/dist-cjs/index.js does not exist in nix store but /nix/store/9x13vrsbm8rb78x8mhrcb72ysza14llz-jkops-1.0.0/lib/node_modules/jkops/node_modules/@aws-sdk/util-utf8-browser/package.json does . It contains a line | 22:34:22 | |
In reply to @keiichi:matrix.orgcan you share derivation? | 22:35:24 | |
| something's probably not getting built and i would like to find out if it's because of our npm hell or npm's own hell | 22:35:45 | |
| Is it ok to share privately ? I dont think there is anything funny but just in case | 22:36:57 | |
| * Is it ok to share privately ? I dont think there is anything sensitive but just in case | 22:37:16 | |
In reply to @keiichi:matrix.orgyep! feel free to PM me on matrix or otherwise share privately | 22:37:46 | |
In reply to @hexa:lossy.networkthe reason I'm asking is mjolnir/draupnir, who both use yarn v1 lock files right now and are critical for the moderation team | 23:26:43 | |
In reply to @hexa:lossy.networki agree they're at risk. my mental bandwidth has really been not great though, and no one has really stepped up about yarn-berry support :( | 23:27:47 | |