4 ms·
> avoid breakage through things like minor version updates of your first level dependencies? No, a much more useful use case is avoid breakage from minor versi
by CGamesPlay 7y ago
> avoid breakage through things like minor version updates of your first level dependencies?
No, a much more useful use case is avoid breakage from minor version updates in your 15th level dependencies. You might be cognizant of your semver best practices, but the team who publishes the string utility library included by the query builder included by your ORM might not be so careful.
- allover 7y ago> No, I think you mean "Yes, but also ..."
- CGamesPlay 7y agoI don't really. If you only wanted to control your first-level dependencies, you would simply not use caret and tilde ranges in your package.json, no lockfile needed (except for cryptographic verification).
- allover 7y ago> I don't really. If you only wanted to control your first-level dependencies They didn't say "only", they said "things like".