Hacker News new | past | comments | ask | show | jobs | submit login

Yarn 2 problems:

uses patched version of typescript. Using latest version of typescript is not reliable IME.

Bugs with npm scripts are really hard to notice, the terminal output is much more pretty, but imo has regressed.

Many npm scripts are not supported. You don't get a warning for which ones are ignored.

Simply viewing the output of your npm scripts is quite annoying, if you can figure it out.

Where yarn 1 "just worked" for my co-worker on windows (I'm on mac), yarn 2 did not "just work" - he got some security prompt (Yes, Corporate Sludge)

Our security scanner (blackduck) could not properly parse the newly formatted yarn.lock file, but, thankfully, I could create a work-aroung by telling yarn2 to use `yarn2.lock` instead... and just maintain 2 lock files. (Yes, more corporate Sludge)

Also, Svelte has a variety of issues with yarn2. In theory should be solved with yarn3.

I am hopeful for yarn3. May try again once it's been iterated on a bit. Maybe once yarn4 beta is out, yarn3 will be well worth trying again.

Biggest thing to me is the typescript situation. Yarn should be completely up-front about hacks like this. Yarn2 should immediately tell you to modify your package.json to point directly to the forked version of typescript when you first run yarn install, and in the migration guide.

zero installs is very neat, but, upload speeds are always slower than download speeds. Proper CI caching+not uploading truckloads to git will be the fastest+best strategy (as long as upload speeds are slower than download)




1. the patch just interjects zip file resolution, it shouldn’t be causing these problems

2. the npm lifecycle changes are very well laid out with many simple remedies see the docs

3. the list of deprecated lifecycle scripts are in the docs and very clear. the reasons are also interesting

4. yeah yarn requires you use process.stdout.write or write a yarn plugin

5. all of the issues you describe can be fixed via the sdk plugin

sounds like the corp stuff is the worst, though we’ve had similar issues with our security scans




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: