16 points | by gkiely 12 hours ago ago
2 comments
The solution already exists.
Nexus, Artifactory, and many others.
Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos and only IT validated packages got uploaded into them.
Still it might be of value to single devs.
Yet again I'm asking folk to look at this artifact mirror that was Show HN a few months ago.
https://github.com/artifact-keeper
It's currently my favourite package gate keeper - after a few years of self-built jank
The solution already exists.
Nexus, Artifactory, and many others.
Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos and only IT validated packages got uploaded into them.
Still it might be of value to single devs.
Yet again I'm asking folk to look at this artifact mirror that was Show HN a few months ago.
https://github.com/artifact-keeper
It's currently my favourite package gate keeper - after a few years of self-built jank