jitpack
Joined 11 years ago
Karma
67
Submissions
21
Member since
Jan 23
https://jitpack.io
View on Hacker NewsRecent submissions
Comment · 10 years ago
Hi. your junior colleague might be interested in the security answer here https://jitpack.io/docs/FAQ/. It's an important matter so will be happy to answer any more questions via email/gitter.
You can also run JitPack on-premises and have full control over build artifacts.
Comment · 11 years ago
So which one is it?
Comment · 11 years ago
Thanks for the submission and recommendation! Very happy you like it and find useful.
Sometimes its good to be lazy and it could mean that you were doing something that can be simplified or automated. Thats what we try to do.
Comment · 11 years ago
Thanks for submitting!
Comment · 11 years ago
Thanks for the feedback and its good to hear your concerns.
Yes, you can use strings as tags but we recommend using Semantic Versioning just as GitHub recommends for Releases [1]. At some point we may choose to only build tags that match semantic versioning, to be decided. Unlike using just GitHub as source repositories we have some over what we serve and that's the difference.
If you make a conscious decision to release, add release notes and a tag why would you delete it? Especially if you want others to use your project. Its just not part of usual release workflow. Right now you can still get the binary for a tag that has been deleted because we cache it. We will probably add restrictions to prevent building another binary with the same tag.
Comment · 11 years ago
Thank you for the compliment, Ron. Glad you see an upside to JitPack:) Regarding your concerns:
1. If you add JitPack as a respository then Maven will still check central first. If the artifact is in central it won't bother going to jitpack.io. Also JitPack enforces your group name to point to your GitHub repo to avoid name clashes.
2. Yes, git tags can be deleted but you really shouldn't do that on a public repo anyway. And most of the time people releasing with tags don't change them.
JitPack is built for the common case and not for the edge cases. And we believe that just because there are rare ways to break the system doesn't mean we should keep a high barrier-to-entry. Sharing your work should be easy and it should be easy for others to try your work.
Comment · 11 years ago
That's correct
Comment · 11 years ago
Currently not. Actually you are the first to ask and it sounds like a great feature:) most likely that would mean you host jitpack on premises. It's something we don't provide yet but it is on the road map.