I migrated all my packages from downloading off random github URLs to downloading off my server (commit)
- Because github will throttle downloads of random archive files, causing intermittent CI failures
- To speed up downloading packages, because some dependencies use the slower git+ URLs rather than archive .tar.gz URLs for their dependencies
- To ensure building continues to work in the future even if some dependency authors delete their repositories, i.e. to prevent a left-pad incident
Unfortunately, this required updating the hashes of many packages even though their source code is identical. This is because some packages have dependencies that need their URLs updated to use the mirror.
Consider the dependency tree:
- myapp


