Hacker Timesnew | past | comments | ask | show | jobs | submit | rykov's commentslogin

Gemfury supports Python, so OK for now.


Michael from Gemfury here. We've been using Golang for a couple of years with a dependency manager that we've built internally and will shortly release to the public. If you'd like to try it, check it out here: https://melody.sh/docs


Rather than creating new methods for a class, YAML.load can be used to call one of a few specific methods ([]=, init_with, or yaml_initialize) for the specified class. This exploit found a class where string arguments to the []= method are inserted into an eval() block, thus becoming code.

A few more details here: http://blog.gemfury.com/post/42259456238/rubygems-vulnerabil...


Gemfury also supports private Python packages


For a long time Amazon fulfilled only their own products (and some large partners) from their warehouses. Now, it's offered to everyone as Fulfillment by Amazon service. No doubt Amazon will offer the locker service, if the market is there.


You're right. Their marketplace model has been built out. Amazon's use of the locker system is an incredible opportunity and as exceptional validation of the technology.

And of course, the open platform to all carriers.



It offers all the advantages of a cloud service - on demand, pay as you go, no maintenance. Very similar to Artifactory Online (cloud version)


Every language has a separate way of doing packages, explaining the individual benefit based on your preference is a more clear message to get across. The other benefit is it helps us choose where to focus.

And, funny story: the word "weapon" is A/B tested with the word "repository" because I had the same doubts. Guess which one converts better? Hint: It's not "repository"


> Guess which one converts better?

How do you define "convert"? Clicking one of the buttons? Signing up for the service? Paying money?

If converting is just clicking one of the buttons, I wonder if you get a lot of low quality converts -- i.e. ones that don't end up paying you money.


I cringe too, but the reason it's used is because it works - great way to explain something new based on something you already know in a few words.


Thank you and Twitter - Bootstrap makes things so much easier.


Wow, nice to see a Bootstrap site which doesn't look like every single other Bootstrap site! Good work!

Though, what's the difference between this and rubygems.org? Is it just like a private version, so you can create proprietary gems and be able to pull them down from anywhere (production, other team members, etc.)?


That's because we started the site before Bootstrap was released, but as we iterated, we ported much of the site over.

And you're spot-on about Gemfury's purpose


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: