npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock

2018-01-10来源 Snyk BlogEnglish
npm Shrinkwrap reloaded: Locking npm Deps with Package-Lock and Yarn.Lock
Locking or “pinning” dependencies is a widespread best practice in Ruby, Python, and other ecosystems. In Node.js locking was much less widespread, until recently, thanks to the improvements provided by package-lock.json and yarn.lock. This post discusses how each of these solutions works and why you may want to use them.

原文：https://www.a8q9.cn/en/article/npm-shrinkwrap-reloaded-locking-npm-deps-with-package-lock-and-yarn-lock-e0e3f2.html

相关文章