In revision control systems, a monorepo (syllabic abbreviation of monolithic repository) is a software development strategy where code for many projects are stored in the same repository. As of 2017 this software engineering practice was over a decade old, but had only recently been named.
Google, Facebook, Microsoft, Uber, and Twitter all employ very large monorepos with varying strategies to scale build systems and version control software with a large volume of code and daily changes.
There are a number of potential advantages to a monorepo over individual repositories:
- Ease of code reuse – Similar functionality or communication protocols can be abstracted into shared libraries and directly included by projects, without the need of a dependency package manager.
- Simplified dependency management – In a multiple repository environment where multiple projects depend on a third-party dependency, that dependency might be downloaded or built multiple times. In a monorepo the build can be easily optimized, as referenced dependencies all exist in the same codebase.
- Atomic commits – When projects that work together are contained in separate repositories, releases need to sync which versions of one project work with the other. And in large enough projects, managing compatible versions between dependencies can become dependency hell. In a monorepo this problem can be negated, since developers may change multiple projects atomically.
- Large-scale code refactoring – Since developers have access to the entire project, refactors can ensure that every piece of the project continues to function after a refactor.
- Collaboration across teams – In a monorepo that uses source dependencies (dependencies that are compiled from source), teams can improve projects being worked on by other teams. This leads to flexible code ownership.
Limitations and disadvantages
- Loss of version information – Although not required, some monorepo builds use one version number across all projects in the repository. This leads to a loss of per-project semantic versioning.
- Lack of per-project security – With split repositories, access to a repository can be granted based upon need. A monorepo allows read access to all software in the project, possibly presenting new security issues.
Companies with large projects have come across hurdles with monorepos, specifically concerning build tools and version control systems. Google's monorepo, speculated to be the largest in the world, meets the classification of an ultra-large-scale system and must handle tens of thousands of contributions every day in a repository over 80 terabytes large.
Scaling version control software
Companies using or switching to existing version control software found that software could not efficiently handle the amount of data required for a large monorepo. Facebook and Microsoft chose to contribute to or fork existing version control software Mercurial and Git respectively, while Google eventually created their own version control system.
For more than ten years, Google had relied on Perforce hosted on a single machine. In 2005 Google's build servers could get locked up to 10 minutes at a time. Google improved this to 30 seconds - 1 minute in 2010. Due to scaling issues, Google eventually developed its own in-house distributed version control system dubbed Piper.
In March 2014 Microsoft announced that it switched over to using Git for its monorepo. In the transition, Microsoft made substantial upstream contributions to the Git client to remove unnecessary file access and improve handling of large files with Git Virtual File System (GVFS).
Scaling build software
Few build tools work well in a monorepo, and flows where builds and continuous integration testing of the entire repository are performed upon check-in will cause performance problems. Directed graph builds systems like Buck, Bazel, and Pants solve this by compartmentalizing builds and tests to the active area of development.
- Hammant, Paul; Smith, Steve. "Trunk Based Development". trunkbaseddevelopment. Retrieved 24 July 2018.
- Levenberg, Rachel Potvin, Josh (July 2016). "Why Google Stores Billions of Lines of Code in a Single Repository". Communications of the ACM. Retrieved 20 July 2018.
- GOODE, DURHAM; Rain. "Scaling Mercurial at Facebook – Facebook Code". fb code. Retrieved 24 July 2018.
- Cooper, Matt. "How We Use Git at Microsoft - Azure DevOps". Microsoft Docs. Retrieved 20 July 2018.
- Aimee Lucido (7 April 2017). Uber Technology Day: Monorepo to Multirepo and Back Again. Retrieved 24 July 2018.
- Dorothy Ordogh (5 April 2018). Pants and Monorepos. Retrieved 24 July 2018.
- Santacroce, Ferdinando; Olsson, Aske; Voss, Rasmus; Narebski, Jakub (2016). Git: Mastering Version Control. Packt Publishing Ltd. p. 756. ISBN 9781787122796.
- Farina, Matt. "Dangers of Monorepo Projects - DZone DevOps". DZone. Retrieved 20 July 2018.
- 点融黑帮 (16 August 2017). "浅谈monorepo" [Talking about monorepo]. Sohu (in Chinese). Retrieved 20 July 2018.
- Metz, Cade (16 September 2015). "Google Is 2 Billion Lines of Code—And It's All in One Place". WIRED. Retrieved 20 July 2018.
- Bloch, Dan. "Still All on One Server: Perforce at Scale" (PDF). Retrieved 23 July 2018.
- Claburn, Thomas. "Facebook is writing a Mercurial server in Rust. This is not a drill". The Register. Retrieved 20 July 2018.
- Blewitt, Alex (9 Jan 2014). "Facebook makes Mercurial faster than Git". InfoQ. Retrieved 24 July 2018.
- Lardinois, Frederic (24 March 2017). "Microsoft now uses Git and GVFS to develop Windows". TechCrunch. Retrieved 20 July 2018.
- Bright, Peter. "Windows switch to Git almost complete: 8,500 commits and 1,760 builds each day". Ars Technica. Retrieved 20 July 2018.
- Mohilo, Dominik (10 June 2016). "8 Build-Tools im Vergleich: Ant – Buildr – Maven – Bazel – Buck – Gradle – Pants – sbt - JAXenter" [8 build tools compared: Ant - Buildr - Maven - Bazel - Buck - Gradle - Pants - sbt]. JAXenter (in German). Retrieved 20 July 2018.
- Moore, Madison (3 May 2016). "GitLab releases security fixes, Pants 1.0, and Sauce Labs integration for JIRA—SD Times news digest: May 3, 2016 - SD Times". SD Times. Retrieved 20 July 2018.