Introduction to Verdaccio - Trivago 2019

Introduction to Verdaccio in the Trivago Open Source conference by Ayush Sharma & Juan Picado

1. A lightweight private npm proxy registry Ayush Sharma & Juan Picado trivago open-source conference Dec 2nd 2019

2. Juan Picado Front-End Engineer at eBay Maintainer at Verdaccio Berlin 🇩🇪 @jotadeveloper

3. Ayush Sharma Software Engineer at trivago Maintainer at Verdaccio Düsseldorf 🇩🇪 @ayusharma_

4. Plan The problems An introduction to Verdaccio ( by Juan ) Live demo with Verdaccio Q & A

5. Front-End Tooling Back-End What is a registry? All projects meet in the registry

6. Node.js Package Managers npm Inc Facebook, Google, Exponent, Tilde Zoltan Kochan

7. General workflow Public registry eg. NPM Inc Mostly we interact with public registries directly.

8. All packages come from the registry https:// twitter .com/bitandbang/status/1134872073896169472

9. Concept of a private registry Public Remote(s)

10. You are missing a lot

11. The Problem(s)

12. Availability

13. The main registry might remove packages by mistake https://blog.npmjs.org/post/169432444640/npm-operational-incident-6-jan-2018

14. Control / Sharing / Integration

15. Your code is just small part of your Application https://twitter.com/liran_tal/status/1067775376229834754

16. A modern application is highly modularized

17. https://twitter.com/housecor/status/1078634947831914496 97% of the code your app uses is shared

18. https://twitter.com/housecor/status/1078634947831914496 create-react-app has ~100k weekly downloads .

19. https://twitter.com/rauchg/status/807626710350839808 You need private registry to write integration tests.

20. Security

21. You might have made a mistake https://twitter.com/seldo/status/791061480904855552

22. You might have made a mistake https://blog.npmjs.org/post/101934969510/oh-no-i-accidentally-published-private-data-to

23. Affordability / Pricing

24. Self Hosted SaaS 💰💰💰 💰💰 SaaS uses volumed based pricing FOSS

25. Case Study “We ran the math, npm charges $7/customer/mo and every user has to have a paid account ; verdaccio can effortlessly scale to hundreds of users and tens of packages a month” “We use it in production on a single DigitalOcean droplet, $5/mo ” https://sheetjs.com/

26. Quick recap to problems Availability Control Security Affordability Latency ( Not a big factor ) Firewall ( In China )

27. A lightweight private npm proxy registry

28. Lightweight Private Registry Proxy (Uplinks) Cache (Storage) Entirely Optional Configuration Pluggable Application Web User Interface MIT License What’s Verdaccio?

29. Installation node > 8

30. Docker and Kubernetes 6 .600.000 pulls https://github.com/verdaccio/docker-examples

31. Private Registry All benefits of npmjs registry without sending the code to the public

32. @scopes and .npmrc It is hard to maintain and insecure

33. Uplinks Handle the distribution efficiently pnpm install --registry http://verdaccio.npm.tool

34. Accessing secured registries Uplinks

35. Storage can be hosted in the cloud Storage

36. Web Interface React, Typescript, Material-UI

37. Plugins Build plugin your own plugin https://verdaccio.org/docs/en/dev-plugins

38. E2E Tests Testing packages before publishing them

39. E2E Verdaccio helps avoiding mistakes https://twitter.com/adamlacombe/status/1084968234607144961

40. E2E create-react-app

41. E2E

42. Keep in Touch http://chat.verdaccio.org https://opencollective.com/verdaccio https://twitter.com/verdaccio_npm https://github.com/verdaccio

43. https://verdaccio.org/docs/en/talks

44. Thanks