Dependency CI
Dev tools
dependency monitoring
SHOW HN2016
198points
62comments
#137of 2,264 in 2016
Top 7%of 2016 by points
How HN took it
DebatedReal support and real criticism
8 positive, 15 neutral or asking, 0 mixed, 8 critical, out of 31 comments about the project. Thread score +0.06.
Idea: 4 for, 2 againstExecution: 0 for, 4 againstPrivacy: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Wide range of supported package managers and languages
From 2 comments
There are plenty of other services in this space (see below for a couple). I hadn't heard of Dependency CI and what immediately impresses me is the number of different package…
michaelmior on HNThere's also a somewhat similar service a friend and myself evaluated a couple of months ago, we had similar ideas but we eventually let go of our prototype because of "fear" of…
musha68k on HN
Useful for catching dependency problems and license reviews
From 2 comments
Great idea! My company requires external libraries licenses to be revieved every half a year and it usually takes a couple of days to do so. Your project could be a real…
didymospl on HNSimilar to Greenkeeper or requires.io, but with a larger range of languages supported. Very interesting. As a side note, I recommend creating a separate github account when…
jvehent on HN
Objections
Only supports GitHub; GitLab and Bitbucket not yet supported
From 2 comments
Currently only supports GitHub but bitbucket and gitlab are on the todo list as well
andrewnez on HNits bad decision making. but to be fair dependency ci will add gitlab and bitbucket in the future. it still sucks that awesome tools like this are github first, git is a central…
yellowsir on HN
Gradle projects show 0 dependencies or errors
From 2 comments
I added my project and the service claims it has 0 dependencies (Listed in the build.gradle file). Bug? https://dependencyci.com/github/RichTeaLang/RichTea
RichWalton on HNAlso having an "error" status or 0 dependencies with my gradle projects...
feedme on HN
Trial sign-up for private repositories did not work for one user
From 1 comment
Very interesting, but I can't seem to sign up for the trial to use on private repositories.
ericcholis on HN
Requests
Support for GitLab and Bitbucket
From 3 comments
OP- Do you have a roadmap to supporting this outside of GitHub? I think the people that benefit most from it, due to corporate policies and outdated deps, are the people least…
insomniacity on HNGreat work on this, looks very useful. Does it only work with GitHub? Would love to have this for my private GitLab instance
SlashmanX on HNYep. Same for Bitbucket. Or just support all git repos that are accessible via the public internet. Github's pricing model means that lots of people can't use it for private…
andybak on HN
Support for Deb packages
From 1 comment
Can you please support Deb packages as well? Thanks
ex_amazon_se on HN
Support for Nimble manifests
From 1 comment
Hey, Nimble creator here. Just wanted to ask, are there any reasons why it's not currently supported on Dependency CI? (apart from just lack of time on your side :))
dom96 on HN
Questions
Is the dependency.yml spec open source?
From 1 comment
Cool concept! Is the spec for the dependency.yml file open source? Would be cool to see something like it become a standard: it's a concern for the project owner, but also for…
wiremine on HN
Why is there no Conda support?
From 1 comment
For python developers - why does not any CI out there support Conda - out of the box.. :(
machbio on HN
Alternatives named
VersionEye
From 2 comments
There are plenty of other services in this space (see below for a couple). I hadn't heard of Dependency CI and what immediately impresses me is the number of different package…
michaelmior on HNYou could use the VersionEye Maven Plugin for that: https://github.com/versioneye/versioneye_maven_plugin. It checks your dependencies against a license whitelist on the…
reiz on HN
Gemnasium
From 1 comment
There are plenty of other services in this space (see below for a couple). I hadn't heard of Dependency CI and what immediately impresses me is the number of different package…
michaelmior on HN
Greenkeeper
From 1 comment
Similar to Greenkeeper or requires.io, but with a larger range of languages supported. Very interesting. As a side note, I recommend creating a separate github account when…
jvehent on HN
requires.io
From 1 comment
Similar to Greenkeeper or requires.io, but with a larger range of languages supported. Very interesting. As a side note, I recommend creating a separate github account when…
jvehent on HN
Debian CI
From 1 comment
The Debian project's Continuous Integration project [1] re-tests all dependent objects whenever a dependency within the Debian archive changes. This way, changes that might…
ckastner on HN