Hacker GitHub

← All repos

JamieMason/shrinkpack

View on GitHub ↗ ★ 800 TypeScript

Fast, resilient, reproducible builds with npm install.

19 mentions on Hacker News by 7 people: 4 stories, 15 comments · first 2015-03-06 · latest 2025-09-22

Mentions per year 19 mentions · busiest year 2016 (12)
20082026
AllStoriesComments NewestTopOldest
  1. I created https://github.com/JamieMason/shrinkpack in 2015 to try and help with this problem, by creating an offline mirror of decompressed tarballs from the npm registry that you'd check into your repository. I thought it might have some…
    comment by fold_left · 2025-09-22 · in Show HN: Tips to stay safe from NPM supply chain attacks
  2. ▲ 1
    Check-in NPM tarballs to freeze changes and install offline
    story by fold_left · 2022-01-11 · 0 comments
  3. …but there is a concrete benefit in being able to continue uninterrupted during outages. [1] https://github.com/JamieMason/shrinkpack
    comment by fold_left · 2022-01-10 · in Dev corrupts NPM libs 'colors' and 'faker', breaking thousands of apps
  4. Checking in your dependencies with https://github.com/JamieMason/shrinkpack can help insulate you from these problems until you're ready to face them. I created this before left-pad and thankfully meant that we were unaffected. A lot of…
    comment by fold_left · 2022-01-10 · in What NPM should do to stop a new colors attack
  5. …to go out to NPM's servers. [0] http://blog.isquaredsoftware.com/2017/07/practical-redux-par... [1] https://github.com/JamieMason/shrinkpack
    comment by acemarke · 2018-03-30 · in Time for developers to address the chaos of Node.js and NPM
  6. Shrinkpack[1] allows npm to provide completely deterministic builds. [1] https://github.com/JamieMason/shrinkpack
    comment by fold_left · 2017-06-04 · in Yarn vs. npm5 determinism
  7. …composer asset plugin (to avoid bower) https://github.com/fxpio/composer-asset-plugin * Shrinkpack https://github.com/JamieMason/shrinkpack (to avoid npm issues) * AngularUI https://github.com/angular-ui (Router, Bootstrap) * Bootstrap 2 &…
    comment by brutuscat · 2016-12-26 · in Ask HN: What languages and technologies/tools are you using right now?
  8. Or just use shrinkpack: https://github.com/JamieMason/shrinkpack But that would be too easy...
    comment by spasquali · 2016-10-13 · in Yarn – A new package manager for JavaScript
  9. I've been using the Shrinkpack tool ( https://github.com/JamieMason/shrinkpack ) to do that with NPM, and am trying to figure out how to do the same thing with Yarn (per my request at https://twitter.com/acemarke/status/785886788493553664…
    comment by acemarke · 2016-10-11 · in Yarn – A new package manager for JavaScript
  10. Brilliant. I've been trying to tackle this problem for the last year or so with shrinkpack ( https://github.com/JamieMason/shrinkpack ) with _some_ degree of success and a nagging feeling that much more could be done. It's great to see…
    comment by fold_left · 2016-10-11 · in Yarn – A new package manager for JavaScript
  11. …either doing it or you aren't. [1] http://books.sonatype.com/nexus-book/reference/npm.html [2] https://github.com/JamieMason/shrinkpack
    comment by insin · 2016-07-17 · in Just: A library of dependency-free JS utilities that do just do one thing
  12. …needs to get more awareness: I'm still learning and prototyping my first JS/NPM/React project, but https://github.com/JamieMason/shrinkpack seems to me like it solves _most_ of the issues involved here. It pulls down all the tarballs, and…
    comment by acemarke · 2016-03-29 · in Changes to Npm's unpublish policy
  13. …needs to get more awareness: I'm still learning and prototyping my first JS/NPM/React project, but https://github.com/JamieMason/shrinkpack seems to me like it solves _most_ of the issues involved here. It pulls down all the tarballs, and…
    comment by acemarke · 2016-03-26 · in Vulnerability #319816 – npm fails to restrict the actions of malicious packages
  14. ▲ 1
    Fast, resilient, reproducible builds with npm install
    story by piercey4 · 2016-03-25 · 0 comments
  15. ▲ 2
    A middle ground for checking in npm dependencies
    story by fold_left · 2016-03-24 · 0 comments
  16. …you to check in the archives that npm downloads instead of the installed node_modules folder. [1]: https://github.com/JamieMason/shrinkpack
    comment by AgentME · 2016-03-23 · in Alert: NPM modules hijacked
  17. I'm still learning and prototyping my first JS/NPM/React project, but https://github.com/JamieMason/shrinkpack seems to me like it solves _most_ of the issues involved here. It pulls down all the tarballs, and updates the…
    comment by acemarke · 2016-03-23 · in How did losing Left-pad package on npm affect your operations?
  18. …really grateful for people's feedback on this approach to try and insulate your projects from them https://github.com/JamieMason/shrinkpack . Its not completely there yet, but I think there's something worth exploring further in this idea.
    comment by fold_left · 2016-03-23 · in I've Just Liberated My Modules
  19. ▲ 1
    Show HN: Resilient, reproducible builds with npm shrinkwrap
    story by fold_left · 2015-03-06 · 0 comments