Private npm - What can you do with your own npm registry

PRIVATE NPM What can you do with your own npm
registry

HELLO I'm Szabolcs Szabolcsi-Toth Senior Front-end Engineer @ Ustream @_Nec

NPM Public and open ecosystem of open source modules Has
several public mirrors

NPM IS GREAT but "what if" you want to do
sensitive stuff you want to do proprietary stuff you want to use npm, but internally distribute modules you don’t trust availability

PRIVATE NPM REGISTRY

“Don’t run your own registry, use ours” Laurie Voss

PRIVATE NPM REGISTRIES Full mirror Caching GBytes of data Only
what needed

OUR USECASE AT USTREAM

SYSOP REQUIREMENT “what happens when an npm install dies during
a major deployment?” “we're f**ked”

SINOPIA github.com/rlidwka/sinopia

SINOPIA caching registry use with chef/docker simple storage

WORKING WITH SINOPIA

AUTHENTICATION simple adduser publisher/reader rights since npm 1.5-alpha (v2.0.0) users
can scope credentials to different registries

PER-PROJECT CONFIGURATION .npmrc per project registry configuration since v1.4.11 package.json
use ‘publishConfig’

PUBLISH - UNPUBLISH n p m p u b l
i s h - - r e g i s t r y h t t p : / / y o u r - o w n . r e g i s t r y . u r l m o d u l e n a m e n p m u n p u b l i s h - - f o r c e - - r e g i s t r y h t t p : / / y o u r - o w n . r e g i s t r y . u r l m o d u l e n a m e

SECURITY Ours only accessible from a well defined domain /
ip pool

USECASES

YOU CAN DO... private modules (obviously)

YOU CAN DO... Versioned modules for deployment Configuration management and
distribution

YOU CAN DO... Not just backend modules Front-end module registry

YOU CAN... Prepare for the open source world Test, use,
then go open source Get used to the tools, workflow and mindset

EXAMPLES

CONFIGURATION MANAGEMENT AND DISTRIBUTION This is how we distribute configurations
for our node apps

BUILD & DEPLOYMENT GIT FEATURE BETA LIVE FEATURE BETA LIVE

BUILD & DEPLOYMENT GIT NPM FEATURE BETA LIVE FEATURE BETA
LIVE MODULE v0.2.4 MODULE v0.1.2 MODULE v0.2.1 MODULE v0.1.1

CONFIGURATION MANAGEMENT AND DISTRIBUTION Works with Modules, or even better:
Configurations

FRONT-END MODULES Internal ‘bower’ using our private npm registry Flat
dep tree cli, or package.json This is also a problem at npm

FINALLY

DRAWBACKS Feature lag Deal with securing and hosting and backup

THE FUTURE npm is working on this! scoped packages (prefixed
with your org)

NPME npme (as enterprise) use it like npm you host
it selective mirror OAuth2, more is coming developed by npm - no feature lag still in trial

NPME It's not free Support npm, use a good solution
no price information yet

THANK YOU! @_Nec

Private npm - What can you do with your own npm...

Private npm - What can you do with your own npm registry

Other Decks in Programming

Featured

Transcript