3 ms·

If you are hobby programming, then not really, but in most workplaces, dependencies are usually pinned and not updated until necessary(bug fixes mostly).

• caspervonb 9y ago
  From what I've seen as a contractor usually there is no package-lock at all.