Caleb Brown

Go appears to enable compression (gzip) by default on requests.

Looking into this further, NPM supports HTTP2. I suspect that there is some weird behavior w.r.t timeouts and HTTP2 multiplexing.

Inspecting the network traffic, there is only 1 connection being opened to `https://registry.npmjs.org/`, so yes, this is multiplexing queries over a single TCP+TLS connection to NPM. This means that the...

We still have errors here. Another attempt to reduce this will be to add an LRU cache and ETag "If-None-Match" checking on requets to NPM for a given package.

After some analysis of the scheduler running on my local machine using `net/http/pprof` for debugging, I can see that memory jumps substantially while pulling feeds - largely from io.ReadAll and...

I will mitigate this issue for the time being by bumping the memory limit in GCP to 1GB

#153 has helped with memory consumption a bit and I haven't seen a memory limit hit for over a day now. I still think it worth trying to lower the...

Hi, I tried to reproduce the this issue and it appears to have gone away. I suspect the gcr.io connection issue was transient. Please try again, and let me know...

1. Does `docker pull gcr.io/distroless/base:nonroot` generate the same response? 1. Have you tried running `docker build . -t local-package-feeds` on a different host? 1. Have you tried restarting your machine...

👍 Any progress on this issue? I've been looking at malware from PyPI and it is common for the `author_email` to be "spoofed" (either pointing to nowhere, or using somebody...