I work on a fairly large node.js project with over 100k LOC, and I rarely run into issues where a minor update to a dependency breaks the application. thrift i

I work on a fairly large node.js project with over 100k LOC, and I rarely run into issues where a minor update to a dependency breaks the application. thrift is the only module where I've locked the version number in package.json. Maybe it's easier because I don't shrinkwrap, I also get the latest version when CI runs and that allows me to make sure that my application is always compatible with the up-to-date releases of all the dependencies. Shrink wrapping has the downside of actually making it harder to upgrade dependencies because you can get further and further behind on updates.