[ 
https://issues.apache.org/jira/browse/CB-6147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13925199#comment-13925199
 ] 

ASF subversion and git services commented on CB-6147:
-----------------------------------------------------

Commit 7e26c88ab32532b4ef19b2950f654e9fa78fb3b8 in cordova-plugman's branch 
refs/heads/master from [~csantana]
[ https://git-wip-us.apache.org/repos/asf?p=cordova-plugman.git;h=7e26c88 ]

CB-6147 Enable CLI and Plugman with npm shrinkwrap


> Enable CLI and Plugman with npm shrinkwrap
> ------------------------------------------
>
>                 Key: CB-6147
>                 URL: https://issues.apache.org/jira/browse/CB-6147
>             Project: Apache Cordova
>          Issue Type: Improvement
>          Components: CLI, Plugman
>    Affects Versions: Master
>            Reporter: Carlos Santana
>            Assignee: Carlos Santana
>
> I think the npm modules cordova and plugman should be enable and publish with 
> shrinkwrap.
> It doesn't mean that cordova-cli/plugman locks down dependency tree for ever, 
> they can be updated as needed at any time a new version if publish to npm.
> More info here:
> https://www.npmjs.org/doc/cli/npm-shrinkwrap.html
> http://blog.nodejs.org/2012/02/27/managing-node-js-dependencies-with-shrinkwrap
> This provides multiple benefits:
> - Everyone testing cordova rc test the same code not just the cordova module, 
> but all its dependencies
> - All users that npm install cordova or plugman get the same code including 
> all dependencies
> - Easier to recreate an user environment, if user reports that is having 
> problems with cordova@3.4.0-0.1.0 then another cordova contributor or 
> committer wil be sure 100% that is running the same code as the user.
> - Avoids "it works on my system and not yours" without shrinkwrap it depends 
> when an user installs cordova or plugman, and if any dependencies inside the 
> whole dependency tree changes a version
> - Could be use to better clarify ALL dependencies including the versions that 
> cordova/plugman was tested, so if a downstream distribution or end user wants 
> to know what is a full list of dependencies to get cordova-cli and plugman 
> working they can take a look at shrinkwrap.json
> - If a downstream distribution wants to redistribute cordova-cli and plugman, 
> then it has higher confident of what dependencies where use at time of 
> testing and releasing a specific version of cordov-cli/plugman, and if it 
> wants to distribute cordova-cli/plugman including its dependencies it's 
> easier to distribute only the versions that where use at time of 
> testing/release.
>  



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to