Disallowing HTTPS imports is overdefensive

jsr-io / jsr

The open-source package registry for modern JavaScript and TypeScript

https://jsr.io

MIT License

2.54k stars 119 forks source link

Disallowing HTTPS imports is overdefensive #735

Open yuhr opened 2 months ago

yuhr commented 2 months ago

JSR has the notion of supported runtimes per package, thus disallowing HTTPS imports in packages that only supports Deno and browsers doesn't make sense.

HTTPS imports are free from all the black magic (i.e. rewrites) done by JSR, and quite a few people (especially Deno users) would want to avoid the need of transpiling or import maps to make their libraries work in browsers, so it should definitely be supported.

lowlighter commented 1 month ago

Somewhat related to https://github.com/denoland/deno/issues/25360