<story><title>NPM Is Joining GitHub</title><url>https://github.blog/2020-03-16-npm-is-joining-github/</url></story><parent_chain><item><author>timrod</author><text>For programming languages, there are several examples of commercially run package managers:&lt;p&gt;&lt;pre&gt;&lt;code&gt;    - the Java&amp;#x2F;Kotlin&amp;#x2F;Scala ecosystem is based around maven central, which is run by Sonatype, Inc.
    - Go modules are hosted by Google. Previously, most libraries were hosted on Github
    - Rust&amp;#x27;s crate index is on Github
    - The Docker&amp;#x2F;Moby registry is run by Docker, Inc. (though that might be a stretch for &amp;quot;package manager&amp;quot; :))&lt;/code&gt;&lt;/pre&gt;</text></item><item><author>mbesto</author><text>&amp;gt; NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in.&lt;p&gt;Why does NPM need to be funded as a commercial entity at all? What other open source library has a private company running its package manager? This one still boggles my mind.</text></item><item><author>K0nserv</author><text>This seems like a good outcome overall. NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. There are problems with more of the software ecosystem consolidating with a single entity but it still feels like an improvement.</text></item></parent_chain><comment><author>kibwen</author><text>&lt;i&gt;&amp;gt; Rust&amp;#x27;s crate index is on Github&lt;/i&gt;&lt;p&gt;Note that the crates.io index is just a single git repo that holds JSON metadata about each crate: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;rust-lang&amp;#x2F;crates.io-index&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;github.com&amp;#x2F;rust-lang&amp;#x2F;crates.io-index&lt;/a&gt; . The actual code found on crates.io is hosted on S3. The index is an important part of the system, but there&amp;#x27;s nothing tying it to Github specifically.</text></comment>
<story><title>NPM Is Joining GitHub</title><url>https://github.blog/2020-03-16-npm-is-joining-github/</url></story><parent_chain><item><author>timrod</author><text>For programming languages, there are several examples of commercially run package managers:&lt;p&gt;&lt;pre&gt;&lt;code&gt;    - the Java&amp;#x2F;Kotlin&amp;#x2F;Scala ecosystem is based around maven central, which is run by Sonatype, Inc.
    - Go modules are hosted by Google. Previously, most libraries were hosted on Github
    - Rust&amp;#x27;s crate index is on Github
    - The Docker&amp;#x2F;Moby registry is run by Docker, Inc. (though that might be a stretch for &amp;quot;package manager&amp;quot; :))&lt;/code&gt;&lt;/pre&gt;</text></item><item><author>mbesto</author><text>&amp;gt; NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in.&lt;p&gt;Why does NPM need to be funded as a commercial entity at all? What other open source library has a private company running its package manager? This one still boggles my mind.</text></item><item><author>K0nserv</author><text>This seems like a good outcome overall. NPM being such an important pillar in the software supply chain while having an unviable business model and largely being funded by VC money was never a good position to be in. There are problems with more of the software ecosystem consolidating with a single entity but it still feels like an improvement.</text></item></parent_chain><comment><author>notRobot</author><text>Please don&amp;#x27;t use code blocks for regular text and quotes. Really hard to read on mobile and narrow viewports.</text></comment>