milahu

> * `static` contains non-functional data (read "indexable/searchable data" ) thats sounds overly limiting. scrapers must parse the `.nix` file anyway, and evaluation should be cheap enough what if my...

> But the absolute bane of that endeavor was dynamically generated package names, versions, and other metadata. we could cache these strings in flake.lock, which already has the "no eval"...

i suggest a whitelist filter, derived from download stats https://discourse.nixos.org/t/scaling-the-python-package-set-in-nixpkgs/3749/20

this database is used in [mach_nix/generate.py](https://github.com/DavHau/mach-nix/blob/a14ded8e502fb8780089a813a022744b021463c9/mach_nix/generate.py#L47) ```py deps_provider = CombinedDependencyProvider( conda_channels_json=conda_channels_json, nixpkgs=nixpkgs, provider_settings=provider_settings, pypi_deps_db_src=pypi_deps_db_src, # HERE py_ver=py_ver, platform=platform, system=system ) ``` and [mach_nix/data/providers.py](https://github.com/DavHau/mach-nix/blob/a14ded8e502fb8780089a813a022744b021463c9/mach_nix/data/providers.py#L137) ```py wheel = WheelDependencyProvider(f"{pypi_deps_db_src}/wheel", *args, **kwargs) sdist...

> https://github.com/darklotuskdb/frida-scripts-fetcher this is wasteful, because it will scrape all `f"https://codeshare.frida.re/browse?page={page}"` for every search "someone" should scrape all the scripts and host them on github with continuous updates ("live mirror")...

yes, see the [readme](https://github.com/snyk/nodejs-lockfile-parser) This is a small utility package that parses lock file and returns either a [dependency tree](https://github.com/snyk/nodejs-lockfile-parser/blob/1a495302089614205478d57611bf7c39d29ce66d/lib/parsers/index.ts#L51) or a [dependency graph](https://github.com/snyk/dep-graph). Dependency graphs are the more modern...

yes, thats what im doing in my [pnpm-install-only](https://github.com/milahu/pnpm-install-only) ```js const lockfileContent = read(lockfilePath); const lockfile = JSON.parse(lockfileContent); const [deps, walk_deps] = ( lockfile.lockfileVersion == 3 ? await getDepgraph(lockfilePath) : //...

yarn lockfiles are not-yet handled by my code other limitations of snyk-nodejs-lockfile-parser: - pnpm lockfiles are not supported, see #111 - `resolved` and `integrity` values are not returned, see #199

any news? example: https://github.com/plasma-umass/browsix/blob/04f0830088560f27d480cde3e37c28269375f59f/app/elements/browsix-terminal/browsix-terminal.ts https://github.com/plasma-umass/browsix/blob/04f0830088560f27d480cde3e37c28269375f59f/app/elements/browsix-terminal/browsix-terminal.html ... using `polymer-ts` which can be replaced by `@polymer/decorators` (replace `@component` with `@customElement` decorator) (`@customElement` will call `customElements.define`) nit: this issue should be renamed to...

note, probably this will only work with the [array interface](https://github.com/sveltejs/svelte/blob/ce3a5791258ec6ecf8c1ea022cb871afe805a45c/src/compiler/utils/mapped_code.ts#L228) of remapping, where the previous sourcemap is unique > "editmap" aka overlay map, transparent map, [fall through](https://en.wikipedia.org/wiki/Switch_statement#Fallthrough) map, partial map...