Skip to content

Bundle ALL dependencies... even for Node package #74

Open

Description

@RayBenefield

After the left pad debacle, there was a great idea for avoiding ever having a dependency problem that also has a lot of other benefits. Roll all of your dependencies into your package... even a node package. This improves download times, and prevents bugs from ever accidentally showing up. Also prevents security issues that enterprises may be worried about.

https://medium.com/@Rich_Harris/how-to-not-break-the-internet-with-this-one-weird-trick-e3e2d57fee28

Also make sure that the dependencies wrapped up into the package get a copyright mention for their MIT license as well as ensure that the package.json removes the dependency section on build for publishing so it shows up as a package with no dependencies in NPM.

Activity

  1. self-assigned this
    on Dec 2, 2017
  2. RayBenefield commented on Dec 9, 2017

    @RayBenefield
    OwnerAuthor

    This will handle the license bundling for me: https://www.npmjs.com/package/rollup-plugin-license

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions