What package manager are you using, and what version of it? js packages are encouraged to have loose version numbers to prevent the "multiple of the same versi

What package manager are you using, and what version of it? js packages are encouraged to have loose version numbers to prevent the "multiple of the same version" issue from happening, and for applications newer npm (and all versions of yarn) include lockfiles by default that lock in all dependencies to an exact version that is unchanging until you tell it to upgrade. While I won't rehash the same "standard library vs widespread packages" debate again, deps only update when you tell them to now, and you are given the tools to overwrite those versions if needed (for example, you could run a command and force all 17 of those point releases of lodash to use exactly 1). It's obviously not ideal that you'd have to do that, but I still prefer it over not having the choice at all and being stuck in "dll hell" which tends to happen with larger projects in other areas.