3 ms·

How does that help? You still update from time to time get fixes, new features and then you can get some unwanted code which is not discovered yet.

• kofejnik 8y ago
  it enables you to run git diff after updating your npm dependencies, so you at least have a chance to detect something shady
  • bbody 8y ago
    In this situation, wouldn't it tell you the package had a version bump?