Handling Dependencies about fpm HOT 4 CLOSED

For now, we'll just support git repository urls, since we don't have a centralized repo yet.

Just like cargo does, we'll support tags, commits, or branches being specified for a git dependency.

I'm planning to implement version specifications exactly like cargo does. That's a bit longer term goal though.

Yes, we'll adopt semantic versioning rules. Long term, it may even be possible to enforce those rules in a centralized repository.

In the short term, we won't "resolve" dependency versions. It will just check if the version already downloaded is compatible with the package's requirements. If not we'll just throw an error. You can then "resolve" the conflict by specifying a version that works for all the dependencies in your package. I don't know of any package manager that has really and truly solved the version compatibility search problem. Many have just reasonable approximations or workarounds.

from fpm.

I should be able to implement this soon. I'll use a similar toml specification style as Rust's cargo. I got sidetracked implementing the ability to parse that properly for the toml parser we're using.

Which brings up a question. Do we specify the specific git version of that library as one of our dependencies, or do we include the functions I implemented directly in our source? For either, at some point we'll be able to remove it and go back to using the library as normal.

from fpm.

Thanks @everythingfunctional, this will be great to get working! I have a few questions:

• At this stage are dependencies simply specified directly as git repository urls (#33 decentralized package management)?
• Are you using git tags to track specific versions in git repositories?
• How are dependency versions specified in fpm.toml? (cargo supports several version operators)
• Are you adopting some form of semantic versioning rules to resolve version compatibility?
  • Also: surely you can only resolve compatible dependency versions after the entire dependency tree has been constructed?

from fpm.

Closing as implemented in both versions of fpm.

from fpm.