JSJ 266 NPM 5.0 with Rebecca Turner
JavaScript Jabber20 Kesä 2017

JSJ 266 NPM 5.0 with Rebecca Turner

On today’s episode of JavaScript Jabber, Charles Max Wood and panelist Joe Eames chat with Rebecca Turner, tech lead for https://www.npmjs.com/, a popular Javascript package manager with the worlds largest software registry. Learn about the newly released NPM 5 including a few of the updated features. Stay tuned![1:58] Was the release of node JS 8 tied to NPM5?
- Features in NPM5 have been in planning for 2 years now.
- Planned on getting it out earlier this year.
- Node 8 was coming out and got pushed out a month.
- Putting NPM5 into Node 8 became doable.
- Pushed really hard to get NPM5 into https://nodejs.org/en/blog/release/v8.0.0/ so that users would get NPM5 and updates to NPM5.
[2:58] Why would it matter? NPM doesn’t care right?
- Right you can use NPM5 with any version of node.
- Most people don’t update NPM, but upgrade Node.
- So releasing them together allowed for when people updated Node they would get NPM 5.
[3:29] How does the upgrade process work if you’re using NVM or some node version manager?
- Depends. Different approaches for each
- NVM gets a fresh copy of Node with new globals. NVM5 and Node 8 are bundled.
- For some, If you manually upgrade NVM you’ll always have to manually. It will keep the one you manually upgraded to.
[4:16] Why NPM 5?
- It’s night and day faster.
- 3 to 5 times speed up is not uncommon.
- Most package managers are slow.
- NPM 5 is still growing. Will get even faster.
[5:18] How did you make it faster?
- The NPM’s cache is old. It’s very slow. Appalling slow.
- Rewrote cache
- Saw huge performance gains
[5:49] What is the function of the cache?
- Cache makes it so you don’t have to reinstall modules from the internet.
- It has registry information too.
- It will now obey http headers for timing out cache.
[6:50] Other things that made it faster?
- Had a log file for a long time. It was called https://docs.npmjs.com/cli/shrinkwrap.
- NPM 5 makes it default.
- Renamed it to packagelog.json
- Exactly like shrinkwrap package file seen before
- In combo with cache, it makes it really fast.
- Stores information about what the tree should look like and it’s general structure.
- It doesn’t have to go back and learn versions of packages.
[7:50] Can you turn the default Packagelog.json off?
- Yes. Just:
- Set packagelog=false in the npmrc
[8:01] Why make it default? Why wasn’t it default before?
- It Didn’t have it before. Shrinkwrap was added as a separate project enfolded in NPM and wasn’t core to the design of NPM.
- Most people would now benefit from it. Not many scenarios where you wouldn’t want one.
- Teams not using the same tools causes headaches and issues.
[9:38] Where does not having a lock show up as a problem?
- It records the versions of the packages installed and where NPM put them so that when you clone a project down you will have exactly the same versions across machines.
- Collaborators have the exact same version.
- Protects from issues after people introduce changes and patch releases.
- NPM being faster is just a bonus.
- Store the sha512 of the package that was installed in the glock file so that we can verify it when you install. It’s Bit for bit what you had previously.
[11:12] Could you solve that by setting the package version as the same version as the .Json file?
- No. That will lock down the versions of the modules that you install personally, not the dependancies, or transitive dependancies.
- Package log allows you to look into the head of the installer. This is what the install looks like.
[12:16] Defaulting the log file speed things up? How?
- It doesn’t have to figure out dependences or the tree which makes it faster.
- Shrinkwrap command is still there, it renames it to shrinkwrap but shrinkwrap cannot be published.
- For application level things or big libraries, using shrinkwrap to lock down versions is popular.
[13:42] You’ve Adopted specifications in a ROC process. When did you guys do that?
- Did it in January
- Have been using them internally for years. Inviting people into the process.
- Specifications
- Written in the form of “Here is the problem and here are the solutions.”
- Spec folder in NPM docs, things being added to that as they specify how things work.
- Spec tests have been great.
[14:59] The update adds new tools. Will there be new things in registry as well?
- Yes.
- Information about a package from registry, it returns document that has info about every version and package json data and full readme for every version.
- It gets very large.
- New API to request smaller version of that document.
- Reduces bandwidth, lower download size, makes it substantially faster.
- Used to be hashed with sha1, With this update it will be hashed with sha512 as well as sha1 for older clients.
[16:20] Will you be stopping support for older versions?
- LTS version of NPM was a thing for a while. They stopped doing that.
- Two models, people either use whatever version came with Node or they update to the latest.
- The NPM team is really small. Hard to maintain old NPM branches.
- Supports current versions and that’s pretty much it.
- If there are big problems they will fix old versions. Patches , etc.
[17:36] Will there ever be problems with that?
- Older versions should continue to work. Shouldn’t break any of that.
- Can’t upgrade from 0.8.
- It does break with different Node version
- Does not support Node versions 0.10 or 0.12.
[18:47] How do you upgrade to NPM?
- sudo npm install -gmpm
- Yes, you may not need sudo. depend on what you’re on.
[19:07] How long has it been since version 4?
- Last October is when it came out.
[19:24] Do you already have plans for version 6?
- Yes!
- More releases than before coming up.
- Finally deprecating old features that are only used in a few packages out of the whole registry.
- Running tests on getting rid of things.
[20:50] Self healing cache. What is it and why do we want it?
- Users are sometimes showing up where installs are broken and tarbols are corrupted.
- This happens sometimes with complicated containerization setups makes it more likely. It’s unclear where the problem actually is.
- https://www.npmjs.com/package/cacache - content addressable cache. Take the hash of your package and use it to look up address to look it up in the cache.
- Compares the Tarbol using an address to look it up in the cache.
- Compares to see if it’s old. Trashes old and downloads updated one.
- Came out with the cache. Free side effect of the new cache.
[23:14] New information output as part of the update?
- NPM has always gave back you the tree from what you just installed.
- Now, trees can be larger and displaying that much information is not useful.
- User patch - gives you specifically what you asked for.
- Information it shows will be something like: “I installed 50 items, updated 7, deleted 2.”
[24:23] Did you personally put that together?
- Yes, threw it together and then got feedback from users and went with it.
- Often unplanned features will get made and will be thrown out to get feedback.
- Another new things ls output now shows you modules that were deduped. Shows logical tree and it’s relationships and what was deduped.
[25:27] You came up to node 4 syntax. Why not go to node 8?
- To allow people with just node 4 be able to use NPM.
- Many projects still run Node 4. Once a project has been deployed, people generally don’t touch it.
[26:20] Other new features? What about the File Specifier?
- File specifier is new. File paths can be in package json, usually put inside pointing to something inside your package.
- It will copy from there to your node modules.
- Just a node module symlink.
- Much faster. Verifiable that what’s in your node modules matches the source. If it’s pointing at the right place it’s correct. If not, then it’s not.
- Earlier, sometimes it was hard to tell.
[27:38] Anything else as part of the NPM 5 release? Who do you think will be most affected by it?
- For the most part, people notice three things:
- 1st. no giant tree at the end
- 2nd. Much faster
- 3rd. Package lock.
[28:14] If it’s locked, how do you update it?
- Run npm installer and then npm update
- Used to be scary, but works well now.
- Updates to latest semver, matches semver to package json to all node modules.
- Updates package lock at the same time
- Summary in Git shows what’s changed.
[28:59] Did Yarn come into play with your decisions with this release?
- The plans have been in play for a long time for this update.
- https://yarnpkg.com/en/ inclusion of similar features and the feedback was an indicator that some of the features were valuable.
[29:53] Other plans to incorporate features similar to yarn?
- Features are already pretty close.
- There are other alternative package managers out there.
- PMPM interesting because when it installs it doesn’t copy all the files. It c

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Jaksot(735)

183 JSJ Should I go to college?

183 JSJ Should I go to college?

JS Remote Conf 2016 will be from January 14th-16th from noon-4:30PM ET! Get your early bird tickets or submit a CFP now thru December 14th! 02:46 - Panel Consensus and Experience and Career Paths16:00 - The School Doesn’t MatterDavid and Goliath: Underdogs, Misfits, and the Art of Battling Giants by Malcolm Gladwell 19:59 - Panel Experience and Career Paths (Cont’d)38:36 - Practically Helpful Knowledge and Disciplines; Interviewing and Hiring46:38 - Privilege and Navigating Without Opportunity49:54 - Why get a degree if it’s not necessary?Support Structure01:02:13 - Consensus Part 2Picks The More Things Change (Jamison) Allison Kaptur: Effective Learning Strategies for Programmers (Jamison) @Aimee_Knight (Joe) Star Wars Battlefront (Joe) Amazing Grass (Aimee) Daniel Brain: Sane, scalable Angular apps are tricky, but not impossible. Lessons learned from PayPal Checkout. (Aimee) xkcd: Correlation (Dave) Lviv, Ukraine (Dave) CharlesMaxWood.com (Chuck) Every Time Zone (Chuck) The Positioning Manual for Technical Firms by Philip Morgan (Chuck) JS Remote Conf (Chuck) Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

28 Loka 201543min

182 JSJ RxJS with Matthew Podwysocki

182 JSJ RxJS with Matthew Podwysocki

02:19 - Matthew Podwysocki IntroductionTwitter GitHubMicrosoft04:01 - RxJSReactive JavaScript Interview w/ Jeffrey Van Gogh & Matthew Podwysocki @ JSConf 2010“First-class Events”10:18 - Practical Experience of UseObservables17:28 - observable-spec 21:43 - Observables and Promises 25:06 - Using RxJS in Common FrameworksRxJS Git Book RxJS Gitter Channel27:53 - Are there places where observables might not be better than callbacks/Promises?29:16 - Why would someone use RxJS on the backend in place of Node streams? RabbitMQ32:28 - Are Promises dying?36:13 - Observable GotchasHot vs Cold Observables40:29 - InfluenceElmFunctional Reactive Programming (FRP)47:47 - Will observables in ES2016 replace RxJS?Picks A cartoon guide to Flux (Aimee) Promisees (Aimee) The Dear Hunter - Act IV Rebirth in Reprise (Jamison) Jessie Char: Expert On Nothing @ NSConf7 (Jamison) XHR Breakpoints (Dave) Glove and Boots (Dave) Computer Programming (Joe) Evan Czaplicki’s Thesis for Elm (Joe) The Alchemist by Paulo Coelho (Chuck) thaliproject (Matthew) BBC Micro Bit (Matthew) Minutemen (Matthew)Special Guest: Matthew Podwysocki. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

21 Loka 20151h 1min

181 JSJ The Evolution of Flux Libraries with Andrew Clark and Dan Abramov

181 JSJ The Evolution of Flux Libraries with Andrew Clark and Dan Abramov

Sign up for JS Remote Conf! Dan and Andrew's super awesome, helpful document that they made for the show during preparation03:22 - Andrew Clark IntroductionTwitter GitHubOpenGovflummox 03:39 - Dan Abramov IntroductionTwitter GitHubJavaScript Jabber Episode #179: redux and React with Dan Abramov 04:03 - FluxFlux vs MVC09:36 - Data FlowWhy FluxComponent > fluxMixinMixins Are Dead. Long Live Composition.  Higher-order Components Sebastian Markbåge's Tweet22:52 - Conceptualizing React and FluxReact.js Conf 2015 - Flux Panel Does redux limit ambiguity that exists in Flux?27:50 - Documentation 30:38 - The Elm Programming Language 32:34 - Making Patterns Explicit in FrameworksTom Dale @ TXJS 2015Let a 1,000 flowers bloom. Then rip 999 of them out by the roots.Sebastian Markbåge: Minimal API Surface Area @ JSConf EU 201436:31 - Getting Started with React and FluxClasses42:42 - Where Flux Falls Short58:23 - Keeping the Core Small; Making DecisionsPicks Strange Loop 2015 Videos (Jamison) Typeset In The Future (Jamison) Open-source as a project model for internal work (w/ speaker notes) by Kevin Lamping (Jamison) Explanation of Zipf's Law (Dave) Will Conant's talk at UtahJS 2015 on Flux (Dave) The Legend of ZERO (3 Book Series) by Sara King (Joe) Camel Up (Joe) The Elm Programming Language (Joe) Boundaries: A talk by Gary Bernhardt from SCNA 2012 (Aimee) Nodevember (Aimee) TV Fool (Chuck) RCA Outdoor Digital HDTV VHF UHF Yagi Type Antenna (Chuck) The Michael Vey Book Series (Chuck) BusinessTown (Dan) Elon Musk: The World’s Raddest Man (Dan) Professor Frisby's Mostly Adequate Guide to Functional Programming (Dan) Abiogenesis (Dan) react-future (Dan) The Righteous Mind (Andrew) lodash-fp (Andrew) Inside Amy Schumer (Andrew) dataloader (Andrew) Careers at OpenGov (Andrew)Special Guests: Andrew Clark and Dan Abramov . Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

14 Loka 201550min

180 JSJ Finding a Job

180 JSJ Finding a Job

02:14 - 15 Minute Podcast Listener chat with Charles Wood 03:23 - Amy’s Upcoming Talk at Nodevember 04:45 - Junior, Mid-level, and Senior Developers08:00 - Advice for Devs Straight Out of Boot Camp (How Job Hunts Work)14:28 - Looking For the Right Job For YOU The Passionate Programmer: Creating a Remarkable Career in Software Development by Chad Fowler23:22 - Mentorship & Company Culture 27:16 - Nailing the InterviewSalary ExpectationsGet to Know Potential Team MembersConfidence32:57 - Be Prepared: Coding is HARD Work35:27 - Getting To Know People & NetworkingHackathonsOpen Source ContributionDon’t Be Afraid … APPLY! ApprenticeshipsSaron Yitbarek: CodeNewbieConferences46:45 - Communication and People SkillsConway’s LawGet in touch with Aimee or Chuck!Tweet @cmaxwFork Aimee’s Ask Me Anything! Picks JS Remote Conf (Chuck) Rails Remote Conf (Chuck) Remote Conference Talks (Chuck) Standing Desks (Aimee) We have a problem with promises (Aimee) Interview Cake (Aimee) Nodevember (Aimee) A standing desk for $22 (Chuck) SmartCells Anti-Fatigue Comfort Mat (Chuck) Pebble Time (Chuck) Pebble.js (Chuck) Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

7 Loka 201558min

179 JSJ redux and React with Dan Abramov

179 JSJ redux and React with Dan Abramov

02:25 - Dan Abramov IntroductionTwitter GitHubDan Abramov: Live React: Hot Reloading with Time Travel @ react-europe 201502:43 - Dan’s Background and Journey Into Building Stuff with React Visual Basic05:48 - redux and React     10:07- The Elm Programming Language 12:19 - Reducers14:04 - Hot Reloading 17:50 - “React makes you a better JavaScript developer.”22:10 - Time Travel28:26 - Storing Data and Managing StateInteracting with the browser on CircleCI's VM34:43 - [Patreon] Support Dan Abramov Creating Redux and React Hot Loader 36:24 - react-transformreact-proxy babel-plugin-react-transformreact-transform-catch-errors41:34 - Using redux outside React43:52 - Editors and Programmer Productivity45:35 - Future PlansPicks The OAuth2 RFC (Aimee) Michael Ries: Hiring Apprentices (Jamison) @sebmck: "Sometimes having email history isn't always a good thing..." (Jamison) Metal Gear Solid 5: The Phantom Pain (Jamison) Firefly (Joe) The Elm Programming Language (Joe) Google Keep (Dave) 15 Minute Podcast Listener chat with Charles Wood (Chuck) Pebble Time (Chuck) 100 Days of Burpees (Chuck) Broad City (Dan) Jamie xx: In Colour (Dan) Cycle.js (Dan)Special Guest: Dan Abramov . Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

30 Syys 20151h

178 JSJ Tech Education and The Business of Running Front End Masters with Marc Grabanski

178 JSJ Tech Education and The Business of Running Front End Masters with Marc Grabanski

03:01 - Marc Grabanski IntroductionTwitter GitHub Blog03:35 - The jQuery UI Datepicker 04:29 - Frontend Masters@FrontendMasters07:26 - The Live Streaming PhenomenonTwitch.tv09:17 - Scalability11:25 - Value, Feedback Cycle14:43 - Structuring Courses and Workshops16:09 - Online vs In-PersonPrerequisites18:11 - Booking Workshops19:02 - Scaling (Cont’d)20:00 - Online Education (eLearning) in General egghead.ioCodeCombatNodeSchool21:40 - The Business ModelLicensing24:12 - Hot SellersKyle Simpson: Advanced JavaScript25:28 - Technical SetupLivestreamFirebase27:27 - Selecting Topics29:41 - Future Topics / Topics in Production30:38 - Individual / Company Attendeesfrontendmasters.com/workshops31:45 - Upcoming Plans for Frontend Masters32:32 - Advice For Starting Something Like Frontend Masters34:23 - Keeping Content Up-to-date36:14 - eLearning ExperimentsUntrusted exercism.ioNodeSchoolA Better Way to Learn JavaScriptMy Tech High39:30 - Giveawaysmarc@frontendmasters.com 40:07 - Getting Started with Programming43:03 - Marketing45:20 - Teacher CompensationPicks Jessica Kerr: Functional Principles In React @ React Rally 2015 (Jamison) thought-haver (Jamison) [Frontend Masters] Angular Application Development (Aimee) [Frontend Masters] JavaScript the Good Parts (Aimee) LÄRABAR (Aimee) Taking time off (Chuck) The Man from U.N.C.L.E. (Joe) BB-8 by Sphero (Joe) ng-conf (Joe) The Tim Ferriss Show (Marc) CodeCombat (Marc) Untrusted (Marc)Special Guest: Marc Grabanski. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

23 Syys 201512min

177 JSJ UI Validation with Oren Rubin

177 JSJ UI Validation with Oren Rubin

02:43 - Oren Rubin IntroductionTwitter GitHubLinkedInTESTIM.IO 05:43 - TestingUnit TestingEnd-to-end TestingAcceptance TestingFunctional TestingPerformance Testing18:18 - Page Object(s)Locators27:10 - Protractor & SeleniumZombie32:06 - Checking UI (Screenshots)37:04 - End-to-end > Full Coverage?40:03 - When should you start testing?42:21 - Cucumber 45:39 - DebuggingPicks Paul Ford: 10 Timeframes (Jamison) Kishi Bashi - “In Fantasia” (Jamison) Matt Zabriskie (Jamison) http-backend-proxy (Aimee) repl.it (Aimee) React.js Training with Michael Jackson and Ryan Florence (Joe) React Rally (Joe) AngularConnect (Joe) ng-conf (Joe) Ruby Remote Conf Videos (Chuck) Angular Remote Conf (Chuck) 15 Minute Podcast Listener chat with Charles Wood (Chuck) Dave Haeffner: Elemental Selenium (Oren) CSS Secrets by Lea Verou (Oren) Cloudinary (Oren)Special Guest: Oren Rubin. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

16 Syys 201559min

176 JSJ RethinkDB with Slava Akhmechet

176 JSJ RethinkDB with Slava Akhmechet

02:20 - Slava Akhmechet IntroductionTwitter GitHub Blog02:41 - RethinkDB Overview@rethinkdb rethinkdb repo    04:24 - How It’s UsedCompose.io05:58 - Joins12:50 - Returning DataJSON13:53 - Getting Data to the BrowserQuora ArticleSocket.IO19:35 - ClusteringReliability & Performance IssuesJepsen (Call Me Maybe Series)Consensus Algorithms26:37 - ReQL 30:53 - IndexesB-tree 32:18 - MapReduce 35:44 - The RethinkDB Community & Contributors38:04 - Is it production ready?40:08 - Differences Between Version 2.0 and 2.1 ExtrasJavaScript Jabber Episode #161: Rust with David HermanSteve Klabnik: Systems Programming for the Ruby Developer @ Ruby Remote Conf 2015  Picks Our World War (Dave) Quest Protein Bars (Aimee) You-Dont-Know-JS (Aimee) Angular Remote Conf (Chuck) Orphan Black (Chuck) Mr. Robot (Slava) Rick and Morty (Slava) The Rust Programming Language (Slava)Special Guest: Slava Akhmechet. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

9 Syys 201551min

Suosittua kategoriassa Liike-elämä ja talous

sijotuskasti
mimmit-sijoittaa
rss-rahapodi
psykopodiaa-podcast
ostan-asuntoja-podcast
oppimisen-psykologia
pomojen-suusta
taloudellinen-mielenrauha
rss-lahtijat
rss-rahamania
rahapuhetta
sijoituskaverit
sijoituspodi
rss-uskalla-yrittaa
rss-h-asselmoilanen
rss-turvacast
rss-yrittajan-mielenmatka
rss-merja-mahkan-rahat
rss-seuraava-potilas
rss-viisas-raha-podi