3 ms·
You can do that with NPM if you pin your dependencies to exact versions, which is the same solution that you would use for any other package manager, and basica
by RussianCow 7y ago
You can do that with NPM if you pin your dependencies to exact versions, which is the same solution that you would use for any other package manager, and basically what Debian and other Linux distros do for you. I don't know why you think this problem is somehow unique to NPM or the JavaScript ecosystem.
- ddevault 7y agoAnd yet, somehow Debian isn't in the new every few months. There's a fundamental difference in culture, for one. But the fundamental difference in approach is there, too. Debian packages are vetted. npm packages are not.