open-source doesn't mean
open ownership or control
Slide 13
Slide 13 text
node grows through 2013
Slide 14
Slide 14 text
success is a catastrophe
you need to survive
Slide 15
Slide 15 text
the package registry
is centralized
Slide 16
Slide 16 text
centralization has advantages
Slide 17
Slide 17 text
centralization has been the trend
Slide 18
Slide 18 text
centralization of costs
Slide 19
Slide 19 text
servers cost money
who pays for them?
Slide 20
Slide 20 text
donations work when you're small
Slide 21
Slide 21 text
success is expensive
(for centralized services)
Slide 22
Slide 22 text
npm needed money
Slide 23
Slide 23 text
this is not a novel problem
Slide 24
Slide 24 text
founding a company
was a novel choice
Slide 25
Slide 25 text
the node project decided this was fine
Slide 26
Slide 26 text
you decided this was fine
Slide 27
Slide 27 text
not everybody thought it was fine
Slide 28
Slide 28 text
money changes everything
Slide 29
Slide 29 text
I decided this was fine
Slide 30
Slide 30 text
I was employee number two
Slide 31
Slide 31 text
those large numbers
sure are large
Slide 32
Slide 32 text
let's talk about money
Slide 33
Slide 33 text
open source generates
a lot of value
Slide 34
Slide 34 text
capitalism does not reward
open source authors
Slide 35
Slide 35 text
most of us give away source code
not expecting money
Slide 36
Slide 36 text
open source vs free software
Slide 37
Slide 37 text
capitalism loves open source
Slide 38
Slide 38 text
one person in this story
didn't give his stuff away
Slide 39
Slide 39 text
javascript's commons
Slide 40
Slide 40 text
commons: the resources
available to everybody
Slide 41
Slide 41 text
the language spec
Slide 42
Slide 42 text
all our shared code
Slide 43
Slide 43 text
our common registry of shared code
is owned by a private company
Slide 44
Slide 44 text
Ryan Dahl was here again last year
Slide 45
Slide 45 text
It’s unfortunate that
there is a centralized
(privately controlled
even) repository for
modules. --Ryan Dahl
Slide 46
Slide 46 text
what are the consequences
of private control?
Slide 47
Slide 47 text
no input into registry policies
Slide 48
Slide 48 text
no input into registry features
Slide 49
Slide 49 text
the registry is what matters
not the clients
Slide 50
Slide 50 text
the management of our commons
is opaque to us
Slide 51
Slide 51 text
there is no trust
without accountability
Slide 52
Slide 52 text
you had no way to
hold me accountable
Slide 53
Slide 53 text
so is npm evil?
mu. ask a different question.
Slide 54
Slide 54 text
npm is a financial instrument
Slide 55
Slide 55 text
financial instruments
are monetary contracts
Slide 56
Slide 56 text
npm Inc is a means for turning
some money into more money
Slide 57
Slide 57 text
companies don’t love you
not even ones that make things you like
Slide 58
Slide 58 text
npm does not love you
Slide 59
Slide 59 text
nobody believes it anymore
Slide 60
Slide 60 text
how did the fall happen?
Slide 61
Slide 61 text
It's 2018. Packages
flow like water.
Slide 62
Slide 62 text
packages cost money even if
you're not paying for them
Slide 63
Slide 63 text
VCs want to go big or go home
Slide 64
Slide 64 text
npm is obligated to
its owners not us
Slide 65
Slide 65 text
make money or raise money
by telling a story about spending money to make money
in some kind of money-ception. you can't fool me; it's money all the way down
Slide 66
Slide 66 text
they hired a CEO who made
some, um, interesting moves
Slide 67
Slide 67 text
the centralized registry is expensive
Slide 68
Slide 68 text
the situation today is uneasy
& probably short-lived
Slide 69
Slide 69 text
this was not the only option
Slide 70
Slide 70 text
what are we going to do about it?
Slide 71
Slide 71 text
do nothing?
Slide 72
Slide 72 text
imagine npm run by a
non-benevolent entity
Slide 73
Slide 73 text
maybe we'll be saved by
some large company
Slide 74
Slide 74 text
I agree with Ryan Dahl
Slide 75
Slide 75 text
do you think that's impossible?
Slide 76
Slide 76 text
I believe in giving source code away
Slide 77
Slide 77 text
Chris Dickinson @isntitvacant
& I have an announcement
Slide 78
Slide 78 text
entropic: a federated package manager
https://www.entropic.dev
Slide 79
Slide 79 text
Apache 2.0 licensed
entirely open source (sorry RMS)