3 ms·
Dependency version ranges should be a _wide_ as possible, so that users of your libraries have flexibility when selecting versions. Rather than artificially co
by spankalee 11y ago
Dependency version ranges should be a _wide_ as possible, so that users of your libraries have flexibility when selecting versions.
Rather than artificially constrict your version ranges, NPM should support real version locking, and applications should check in their lock file.
- elclanrs 11y agoDo you mean like npm's shrinkwrap [1]? [1] https://docs.npmjs.com/cli/shrinkwrap https://docs.npmjs.com/cli/shrinkwrap
- dustinmoorenet 11y agoKnown ranges are fine. e.g. It is fine to accept known published versions 0.0.1 to 0.0.4, but not unknown future versions 0.0.5 and up, which ^ and ~ allow.