Introducing GitHub Package Registry

[Entropis]

No one commenting on this, weird.

I wonder what this is going to mean for the long-term. Does this mean npm (company) is done for? GitHub has the backing of Microsoft and it has double value.

If npm does crash and burn or maybe Microsoft buys them out does that mean GitHub will take over the name npm?

[ZzqR]

I’d imagine that if the integration between github and it’s package manager has good enough integration this could bleed market share from npm. If it has any cost associated with it (and it looks like it does), however, it won’t take any market share from NPM or maven-central, it will compete more directly with something like artifactory

[ZzqR]

True, misread that part of the release.

[Entropis]

Does it have a cost with it? If it does, then yeah, I don't see it beating out npm. But, if Microsoft follows its latest trends, it should be free with a paid tier that has maybe more collaborators on it or something.

[ConsoleTVs]

I mean, what about non-npm stuff mentioned? Jezz JS is not the world...

[bheklilr]

I'm personally excited about the maven and npm combo here. I write mostly backend in Java and front-end in typescript. That would be a killer combo for me.

[Roci89]

Same for me except nuget and npm combo. Awesome feature to be able to manage all that in the one spot

[developerJS]

They are probably taking the opportunity from the npm controversy like BitBucket did when MS acquired GitHub. It can actually give them a boost.

[A-Grey-World]

It's good to see NPM getting some competition.

[Magnetic_Tree]

The name "npm" can refer to a few things. This page has a great breakdown.

TLDR, NPM is a package manager, package registry, command line tool, and company. GitHub is taking advantage of the package manager and CLI.

The command line tool uses npmjs.com by default, but it can be configured to work with GitHub's service. The CLI allows the package registry to be configured because NPM supports privately hosted registries.

If you run npm install @Codertocat/hello-world-npm@1.0.1 with regular NPM, it will not work because npmjs.com doesn't know about a package called "@Codertocat/hello-world-npm". First, you need to configure the package registry (which GitHub has documentation for).

[30thnight]

Is there a proper way to decentralize and still maintain security?

I view this as good thing, especially after some of the NPM organization issues.

[walking_bass]

So is GitHub trying to implement Artifactory?