And it is still inefficient today, considering that an initial pod install takes around 12 minutes just to clone the cocapods repo...
What happens if the owner tries to remove their package, or rename it? or modify it?
What if the owner deletes his/her account / organization, or renames user / organization?
The nice thing about many package managers is that they don't allow mutation, removal or renaming of packages.
So when you have a lock-file checked into git you can be sure you can fetch all the dependencies again.
That has been a huge problem in the past and it's still somewhat of a problem. However now that pip and virtualenv (renamed venv) are part of the standard python install and pip has gotten a lot better when comes to cross platform installs and handling binary dependencies, hopefully we'll see some more standardization around those tools.
That being said, I use conda for managing dependencies and environment for basically all my python development work and have no complaints.
pip: install a package system-wide
venv: create fake system paths locally in your current directory
so do everything within a venv and pin your dependency versions into requirements.txt. i've found it to be exactly as powerful as i need, works out of the box, and it's easy.
If it lives in GH it may as well have a ppa (therefore a deb). I assume programming language packages will be first and later on system level packages if possible?
So MS is attempting to extinguish GitHub, a property they own, now? Or is MS embracing blah blah blah the concept of package management?
No.. they buy GitHub so they own pretty much most of open source software. Embrace.
Then they release a new package registry, one to rule them all, it supports all the things. Extend.
Extinguish, I don't know, that's why I asked the question, I don't know what the play here is.
Is it simply they now fully control distribution?
This doesn't sound like an issue until we're 10 years down the line and nobody creates package managers anymore. Nobody mirrors Linux, and everything has to go through GitHub.
Like I would think this is my own bias, and it certainly sounds tinfoil hattish to even me, but then I haven't forgotten those memos. Have you?
Just can’t imagine anyone would remember without a good name.