#musicbrainz-devel

pymbngs makes it hard to attack the server :-P

alastairp: headphones seems to vendor in all the stuff they use anyway, so the version shouldn't matter much

oh good

so when there's a bug they'll keep doing it?

though, tbf, I originally wanted it to be used like that

when it was just a 1 file app

yeah, I mean, I don't *agree* with their usage, but that seems to be what they do :P

can anyone define "vendor in" for me ?

doskir: instead of using system-installed library versions, it puts the libraries it uses into the /lib directory

musicbrainzngs is already there for some reason, heh, probably an old version

but it should be updated

none of that is code rembo or other headphones contributors wrote, it's just libraries that it uses

so thats a bad idea i take it

well, it has advantages and disadvantages

ianmcorvidae: oh. it's because beets uses it

advantages include: nobody has to go anywhere but one place

and it's included beets too

disadvantages include: it means updates to libraries take longer to get used

but that disadvantage goes away if the developer actually watches what the progress of his dependencies right ?

of course thats a BIG if

well, somewhat

people using things on their own systems are at least slightly more likely to update the library, in some cases, without updating the main thing

getting people to update is always a pain though

doskir: if you link to an global version then the moment there's a bug fix in the library, then all things that use it benefit from the fix

(presuming they update the library, of course, but)

one disadvantage i can think of is that a stupid library developer could push a patch that ruins the api and then you have to go around fixing potentially major parts of your app

yeah, that can sometimes happen

doskir: that's pretty much a solved problem

in terms of version numbers

reflecting api compatibility

youre assuming people actually obey that :(

e.g. 1.1.0 -> 1.1.1 doesn't break the api

sure

yeah

I think it's acceptable to vendor in a small number of poorly-behaved libraries, but in general it's not a good idea

ill try not to break that rule if im ever in charge of a project worth a damn

ocharles or warp around?

I'm trying to get this musicbrainz mirror set up but I'm getting an error when running "carton exec -- plackup -Ilib -r"

You need to tell us what the error is