packagecloud Reviews

Verdaccio Reviews

packagecloud mentions (5)

• Reports on successful blocks

  Looks like the repository on packagecloud.io don't have the latest version yet, it only lists 0.0.23? I got 0.0.24 from somewhere though. Source: over 3 years ago

• I tried to switch to the testing branch of Debian and below is my /etc/apt/sources.list:

  Forcing the config can be don manually by modifying the config files that points to different repos in /etc/apt/sources.list.d, or for packages on packagecloud.io, you can use the method that I describe. The latter works because packagecloud.io has a robust strip to create config files based on the detected operating systems or you can force a certain operating system/dist as shown above. Source: over 3 years ago

• I tried to switch to the testing branch of Debian and below is my /etc/apt/sources.list:

  The error you are seeing is because you probably ran one of the steps that creates a configuration in your system that points to packagecloud.io, so that your system can retrieve packages from https://packagecloud.io/cs50/repo. However since there are no Debian bookworm packages there, you are seeing the error. Source: over 3 years ago

• Free for dev - list of software (SaaS, PaaS, IaaS, etc.)

  Packagecloud.io — Hosted Package Repositories for YUM, APT, RubyGem and PyPI. Limited free plans, open source plans available via request. - Source: dev.to / almost 5 years ago

• Need help installing Pi hole

  You have something installed via packagecloud.io which is no longer avalaible. Delete the line from your sources. Source: about 5 years ago

Verdaccio mentions (31)

• Why npm supply chain attacks keep happening and how to harden your installs

  Use a private registry or proxy. Verdaccio is the open-source standard. It lets you cache, mirror, and gate which versions reach your team. - Source: dev.to / about 2 months ago

• Shai-Hulud Returns: Over 300 NPM Packages Infected

  This is a good sign that it's time to get packages off of NPM and come up with an alternative. For those who haven't heard of or tried Verdaccio [1], it may be an option. Relatively easy to point at your own server via NPM once you set it up. [1] https://verdaccio.org/. - Source: Hacker News / 8 months ago

• Behind the Scenes of Bun Install

  > Really wish the norm was that companies hosted their own registries for their own usage Is this not the norm? I've never worked anywhere that didn't use/host their own registry - both for hosting private packages, but also as a caching proxy to the public registry (and therefore more control over availability, security policy) https://verdaccio.org/ is my go to self hosted solution, but the cloud providers have... - Source: Hacker News / 10 months ago

• Active NPN Supply Chain Attack on `Nx` Package

  I wonder if anyone use https://verdaccio.org/ to vendor packages? In theory for each package one could: * npm install pkg * npm pack pkg * npm publish --registry=https://verdaccio.company.com * set .npmrc to "registry=https://verdaccio.company.com/ when working with the actual app. ...this way, one could vet packages one by one. The main caveat I see is that it’s very inconvenient to have to vet and publish each... - Source: Hacker News / 11 months ago

• Easily Create Your Own Private NPM Registry Using Verdaccio

  Another option is to publish our package is with azure artifacts, npm with free version public. But if we want to make it private, we need to pay or set up our own private npm repository. In this moment is where Verdaccio comes in to help us. - Source: dev.to / over 2 years ago