Comments (6)
I think you have a good idea, and agree that the implied insistence on all dependencies being the latest at any given time is both unrealistic and counter-productive. There are often quite reasonable and good reasons not have 100% of your dependencies being the very latest release at some points. Yet on the other hand, the general state of dependency up-to-date-ness is a useful signal in
evaluating software. I like that you are trying to find a better way to communicate/summarize this signal, hard to say how will it will succeed without seeing it in practice.
I think it's possible the score idea could be good after all --- I mean, do we really know what "recent" or "behind a little bit" means without clicking through either? We might think we do, just we might or might not for a raw score, but there is editorial judgement involved in the algorithm in both cases. But I'm in favor of trying out anything new! Perhaps both a score and a categorical summary would be useful together, or perhaps something else entirely. I think the conscientious evaluator will probably want to click through in any event to see the details (how many dependencies are a major version behind, and what are they? What are the dates the new major version they don't have was released; yesterday, or two years ago?), so making the click-through page as "legible" as possible for the use case of someone evaluating third-party software (a somewhat different use case than the maintainer(s) themselves) is probably worth spending time on too.
from feedback.
@jrochkind thanks for the input!
I'm also curious about pursuing the score, but I was thinking it would lead towards somehow scoring the health of the library itself: is it well maintained, how many releases, open bugs, along those lines.
from feedback.
I looked at https://github.com/jaredbeck/libyear-bundler recently β it will tell you βhow out-of-date your Gemfile is, in a single numberβ. A number like that (perhaps divided with the total number of gems in the application being checked) might be useful in your dependency badge.
Just ensure it works with private gem servers too, which I think libyear-bundler doesnβt. π
from feedback.
Thanks @bquorning, I didn't know about libyear, that's a very interesting approach.
from feedback.
I like the idea.
I find the number of dependencies to be often as important as their state, especially in case of small projects. Having little to no runtime dependencies is a huge plus. I saw that you have a "count of outdated dependencies". That's a great start. I was wondering how the color coding works there? I assume it's the same (as recent, stale, etc.) but in that case I find it a bit misleading: e.g. you could have a green badge saying 10/10 outdated. For me what would add the most value is a badge that states the number of dependencies and their overall state, so somewhat a mixture of the two (i.e. I'm not interested in how many dependencies are slightly outdated). Something like: dependencies | 3, stale
would be awesome. Or a simple badge with the number of runtime dependencies would also do, which can be used together with the summary one.
from feedback.
Additionally it would be great to have badges per branch. I.e. development and release branches might differ a lot.
from feedback.
Related Issues (20)
- Gem dependency is included in update PR, even when it is paused HOT 1
- Option to update dependency to next closest one, instead of latest HOT 2
- Bad Repo link HOT 1
- Increment major one step at a time
- Workspaces support for npm HOT 1
- Can't login after changing Github username HOT 2
- (npm private repo fails) Depfu cannot access this registry. HOT 1
- Depfu is stuck and needs your help
- BulmaJS: no changelog HOT 1
- How does Depfu count? HOT 2
- Allow to run custom scripts during updates
- Allow to group dependencies across languages
- Deno support?
- Allow community supported dep bumpers
- Bundler cannot parse Gemfile when gem version given as File.read('.version') HOT 2
- Depfu shows an incorrect repository link for `open`. HOT 1
- Grouped update skip scheduled update PR HOT 1
- flipper rubygems are not recognized as possible updates HOT 3
- "Include out-of-spec updates" for Bundler grouped updates HOT 2
- Respect indentation in `package-lock.json` HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from feedback.