Brian LeRoux wrote: >yeaaaah, we've been through this in other threads. pin the dep in >package.json to a version or sha and your problem is solved. the only time >a node_modules should be checked in, maybe, is in a deployment scenario >for >hosted service type things. > >(bad corp networks aside!)
Bad corporate networks exist. And they block ssh: (I.e. git:). It's really painful to have things fail just because someone decided to use git://github.com instead of https://github.com … I'm also pretty sure that we don't currently have the right code to actually get dependencies and install them when we do a platform add. So while you may want to make a hand waving statement about "we should stop doing this", someone would almost certainly have to write code to make it do the right thing. Further, that doesn't fix the case I've described above. I don't see a reason to change the status quo, and I have identified a reason not to change it.
smime.p7s
Description: S/MIME cryptographic signature
