4 ms·check them into your gitby kofejnik 8y agocheck them into your gitdmortin 8y agoHow does that help? You still update from time to time get fixes, new features and then you can get some unwanted code which is not discovered yet.kofejnik 8y agoit enables you to run git diff after updating your npm dependencies, so you at least have a chance to detect something shadybbody 8y agoIn this situation, wouldn't it tell you the package had a version bump?gedy 8y agoand/or use fixed versions with package-lock. Or private npm cache if you are concerned.