3 ms·
Could you just publish garbage instead?
by celticninja 7y ago
Could you just publish garbage instead?
- yoz-y 7y agoYou could but everybody uses version pinning in production, right?
- emsy 7y agoPeople who are serious about reproducible builds host their own repos. Most people probably don’t know the difference between ^1.0.1 and ~1.0.1
- bakuninsbart 7y agoThanks for making me look that up!
- delfinom 7y agoIf only npm's version pinning actually version pinned without idiotic subrules. package-lock.json is just one massive lie.
- minitech 7y agoWhat do you mean?
- jpangs88 7y agoVersioned garbage, but yeah you could. It would just make a new version not work which isn't as harmful as taking away a package.