If I can offer an outside opinion... after watching how the nodejs ecosystem interacts with the rest of the os on these systems....after observing the issues packagers are constantly running into with nodejs packages when packaging for other distros....as well as opensuse -- my observed opinion is that no distro should package them at all.

The maintainers for npm simply do not care to integrate with the os.  It's junkware.  It was never meant not to be outside of rare instances of extreme hubris in the javascript community.  

I know it's not good to call something so many people contribute to 'junkware', but, it makes no attempt to fix their broken package management model, is a vessel for security problems to otherwise secure operating systems.  They know these problems exist.  They do not desire to fix them.  They view their way of package distribution as superior, without any regard for the rest of the system -ir even the environments in their own use cases when designing this architecture- because that community comes from a culture that does not acknowledge that the OS exists.  I have heard these conversations take place on development shop floors.

Drop them.  The nodejs maintainers get away with these arrogant models because every distro is trying hard to integrate their poorly designed package delivery pipelines and dependency models for no other reason than that alot of software that should not have been written in this runtime, was written in this runtime, and we all need the latest app.

The result is not a problem created by "old vs new" or people "just not getting it".  These are propaganda influences at best, and lies at worst.  The problem is that the nodejs community lacks the foresight, engineering capability, and desire for cooperation -- and the solution is to simply drop the entire ecosystem until they redesign their dependency package management from the ground up.

People with more influence than I have will need to see this and move forward with something of this nature for it to get better.  Just simply drop them, and get the other distros to as well.

This never should have gotten this far.


On Wed, Feb 24, 2021 at 1:34 AM Dan Čermák <dcermak@suse.com> wrote:
Hi Matwey,

"Matwey V. Kornilov" <matwey.kornilov@gmail.com> writes:

> Hi,
> I would like to package influxdb2: https://github.com/influxdata/influxdb
> that is the next major version for server:database/influxdb
> Probably, they will coexist for some time, but it doesn't matter currently.
> I've found that influxdb2 is provided with a built in WebUI interface based
> on nodejs(?) and it requires about 2000 packages from npm to be built. Even
> though I can do it manually, there is no internet connection in OBS. I have
> not found any info on the wifi how to overcome this issue. Probably I need
> to preferetch these sources from npm and put them as a tarball.

I have run into exactly the same problem with node's dependency
explosion and Ludwig kindly pointed me to
https://github.com/openSUSE/obs-service-node_modules which takes care of
the bundling for you.

Hope this helps,


Dan Čermák <dcermak@suse.com>
Software Engineer Development tools
SUSE Software Solutions Germany GmbH
Maxfeldstr. 5
90409 Nuremberg

(HRB 36809, AG Nürnberg)
Managing Director: Felix Imendörffer