Explore the complex economics of open source software in this thought-provoking conference talk from JSConf EU 2019. Delve into the current state of the JavaScript package commons, examining how a for-profit entity gained control over shared code and the implications of this centralized system. Analyze the advantages and disadvantages of centralization, including cost distribution and accountability issues. Investigate the relationship between open source and capitalism, and consider the consequences of private control over a common registry. Learn about alternative approaches, such as federated package management, and reflect on the future of JavaScript package distribution. Gain valuable insights into the challenges facing the open source community and the potential solutions for maintaining trust and accountability in software development.
Overview
Syllabus
Intro
The economics of package management
you are in this story
open-source doesn't mean open ownership or control
the package registry is centralized
centralization has advantages
centralization of costs
servers cost money who pays for them?
founding a company was a novel choice
those large numbers sure are large
open source generates a lot of value
open source vs free software
capitalism loves open source
the language spec
our common registry of shared code is owned by a private company
what are the consequences of private control?
no input into registry policies
the registry is what matters not the clients
the management of our commons is opaque to us
there is no trust without accountability
you had no way to hold me accountable
so is npm evil? mu. ask a different question.
npm is a financial instrument
npm Inc is a means for turning some money into more money
It's 2018. Packages flow like water.
packages cost money even if you're not paying for them
make money or raise money by telling a story about spending money to make money
imagine npm run by a non-benevolent entity
I agree with Ryan Dahl
entropic a federated package manager
new cli & new api decentralized: many registries
Taught by
JSConf
