4 ms·
Not sure how npm works in detail, doesn't it pull directly from devs' repositories? In that case can't the devs just publish an update that breaks everything?
by Crinus 7y ago
Not sure how npm works in detail, doesn't it pull directly from devs' repositories? In that case can't the devs just publish an update that breaks everything?
- julianwachholz 7y agoThis wouldn't be as big of a problem with version pinning.
- parsimo2010 7y agonpm allows for installation of specific versions. So even if a dev publishes a new version that breaks you can select a previous version known to work. A good dev shouldn’t be updating willy-nilly to the latest version just because it’s the latest. They ought to spec a particular version and update after testing.
- monocasa 7y agoDoesn't npm allow a dev to replace or redact already released versions?