Skip to main content


It’s 2020, it should take a developer less than a minute to get your free and open source project up and running.

(Looking at some native apps, that’s how long it would take to read through the list of dependencies you have install before you can even get the damn thing built. I can’t believe dependency management still isn’t a thing in some circles. *smh*)

But if you have dependency management, some people will depend on left-pad and such, and other people will depend on their packages, and you get a 15-minute `npm install`.

I'm OK with installing one or two libraries manually if it means not having npm or the equivalent in my toolchain.

At #Friendica, we ship the Composer dependency manager compiled executable with the project because we don't assume people will have it available/be able to install it on their server. The recent 2.0 version of Composer doesn't work with a particular dependency we've been using, so we aren't able to update the executable past the version 1.9 and the shipped executable is the only reliable way of pulling dependency with a git install. Each release we also prepare an archive with all the dependencies already included.