diff options
Diffstat (limited to 'content/posts/2021-06-21-ipwhl-update.md')
| -rw-r--r-- | content/posts/2021-06-21-ipwhl-update.md | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/content/posts/2021-06-21-ipwhl-update.md b/content/posts/2021-06-21-ipwhl-update.md index fc8d3f2..a4af78f 100644 --- a/content/posts/2021-06-21-ipwhl-update.md +++ b/content/posts/2021-06-21-ipwhl-update.md @@ -15,7 +15,7 @@ introduction. [ipwhl-annonce]: https://lists.sr.ht/~cnx/ipwhl-announce/%3CCC8HUR1YAFDL.YHJBG1SM70WE%40nix%3E [ipwhl]: https://sr.ht/~cnx/ipwhl/ -# Les Cheeses +## Les Cheeses In short, IPWHL is a PyPI alternative (though, initially the package database would be collected from there). What it provides: @@ -24,7 +24,7 @@ would be collected from there). What it provides: - Security - Reproducibility -## Decentralization +### Decentralization IPWHL uses [IPFS][ipfs] for storing packages. This provides several advantages: @@ -38,7 +38,7 @@ to use our cheeses. [ipfs]: https://ipfs.io/ -## Security +### Security No single point of failure is a security feature itself, but besides that, IPWHL also is more secure because: @@ -46,18 +46,18 @@ IPWHL also is more secure because: - We have CIDs and we cryptographically sign the packages thanks to merkle dag - We avoid packaging packages that are typosquat attacks -## Reproducibility +### Reproducibility IPWHL has a pre-resolved dependency and its packaging strategy is similar to NixOS, a distro known for its reproducibility. The installer can uses the CID and the package name to reproduce exactly the package. -# Current problems +## Current problems Despite the theoretical advantages, IPWHL is a new project and thus has several problems -## Lack of packages +### Lack of packages A distribution doesn't mean anything without packages, and IPWHL is indeed in need of them. @@ -69,7 +69,7 @@ sole maintainers, keep up with too many packages and make sure they're all up-to-date. Therefore, please, come help us if you're interested in this project. -## Dependency Hell +### Dependency Hell Maybe you've heard of `npm install is-even` meme, if you hang out in some programming meme groups. It represents an underlying problem of having too @@ -124,7 +124,7 @@ Or, in some cases, such as for `tox`, it can even be like this: </figcaption> </figure> -# How to help +## How to help <picture> <source srcset="/images/begging-for-help.webp" type="image/webp"> @@ -137,13 +137,13 @@ To start, please take a look at [the manual page][ipwhl-man] [ipwhl-man]: https://man.sr.ht/~cnx/ipwhl/guides/contrib.md -## Help declaring packages information +### Help declaring packages information Currently, the packages with high priority is listed here: https://todo.sr.ht/~cnx/ipwhl/5 -## Write docs +### Write docs User and contribution manuals are not really clearly written, and some information are scattered across the [mailing lists][lists]. You can help by @@ -151,7 +151,7 @@ compile them into a comprehensive structured manual. [lists]: https://sr.ht/~cnx/ipwhl/lists -## Help resolving dependency conflicts +### Help resolving dependency conflicts > *Maybe the real cheeses are the packages we helped along the way* |