2 ms·
Surprised that this is missing a recommendation to run 'npm shrinkwrap' and include npm-shrinkwrap.json in your deployment package so that the dependencies you
by jimmcslim 11y ago
Surprised that this is missing a recommendation to run 'npm shrinkwrap' and include npm-shrinkwrap.json in your deployment package so that the dependencies you have been testing against (and more importantly your dependencies' dependencies) don't shift unintentionally under your feet. Although maybe this isn't a problem with npm v3?
I'd also recommend including your dependencies in your deployment package anyway to avoid a deployment being held up by npmjs.org downtime.
- nailer 11y agoAuthor here! You're totally right, I've just added a shrinkwrap section. PS. npm v3 still needs it, in fact it makes it better - `install --save` updates the shrinkwrap file. Re: checking in modules, I used to do this during 2013 when npm was up and down every few days, but stopped a couple of years ago after npm Inc stabilised everything. It's been solid so far and the smaller repo sizes (and faster deploys) have been worth it.