On Tue, 22 Oct 2019 at 11:12, Jean-Marie LEMETAYER <
[email protected]> wrote:

> The simplest solution is to let npm do its job. Assuming the fetcher
> only get the sources of the package, the class will now run
> 'npm install' to create a build directory. The build directory is then
> copied wisely to the destination.
>

I agree that npm dependency handing is a mess, and we should indeed let npm
do the job.

However, 'npm install' pulls various things from the network; this can only
be happen during do_fetch(), so that offline builds can continue to work.
Whatever has been downloaded, needs to go to DL_DIR.

It also needs to be reproducible (there should be a guarantee that it
always pulls the same set of sources which are verified through a checksum
of some kind), I guess that can only be achieved through upstream provided
shrinkwrap?

Alex
-- 
_______________________________________________
Openembedded-core mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-core

Reply via email to