Hacker News new | past | comments | ask | show | jobs | submit login

I'm sure companies would pay for it. The service needs to be part of the main package service, not some third party.



Interesting if you think that npm/Rubygems/PyPI are leaving a load of money on the table, why do you think they haven't introduced those services so far...


ISTM we're just talking about running an alternate, more restrictive registry? npm etc. don't have to play any part in that. This service could be offered by anyone: IBM could do it.


Indeed IBM or anyone else could do this, but they're not, which implies a lack of demand.


Because their mission isn't to generate income like a traditional business. But if the income went back to the foundations, like Python Foundation, I think that would make sense.


But income can be also used to help finance their main mission. Obviously they seem to operate fine without strong reasons to expand revenue streams, but I feel like they ignore an opportunity to create improvements for just about everyone.


Anaconda gives a healthy amount to open source, either by donations to foundations like NumFOCUS or paying salaries of contributors. Is that what you're looking for?


npm is a commercial organisation, they offer paid subscriptions but don't offer a curated package signed option...


Sort of a critical feature they are missing




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: