vasusen
Joined 16 years ago
Joined 16 years ago
Our customers mainly use Donobu's SDK to run their end-to-end tests in CI/CD, with AI self-healing and triage. It was unlicensed but on public npm on purpose, so `npm i` just worked.
NPM registry has had a rough year. When we looked at alternatives, we realized self-hosting packages is not that hard anymore. Our customers continue using `npm i`. They just add a .npmrc pointing at our registry; reusing their existing Donobu API key for auth was a nice bonus.
.npmrc was the only thing needed:
@donobu:registry=https://api.donobu.com/npm/
//api.donobu.com/npm/:_authToken=${DONOBU_API_KEY}It was a really scary experience and I couldn’t do much about it in the moment.
Under California’s CCPA / CPRA, most enforcement power lies with the California Privacy Protection Agency (CPPA) and the California Attorney General, not private individuals. This limits the actual downside to a company vs. an unbounded downside of class-action lawsuit threat.
Merchant's end up getting the short end of the stick in most cases.
If I were to bet, while this is fun, it will be a disaster for conversions once the launch hype goes away.
https://x.com/vasusen