Who the hell does not lock their dependencies with npm.lock or yarn.lock? The suggestion is practically useless. This is low-effort blogospam with very little c

Who the hell does not lock their dependencies with npm.lock or yarn.lock? The suggestion is practically useless. This is low-effort blogospam with very little concrete information; well congrats on reaching front page and drawing attention to the completely unrelated "Open Source Session Replay" you sell.