3 ms·
use yarn instead, the lockfile is much better.
by beaconstudios 5y ago
use yarn instead, the lockfile is much better.
- davidmurdoch 5y agoProblem with yarn is that it doesn't actually use dependencies' lock files... So once you publish your library to npm your lock file doesn't do anything whatsoever.
- lights0123 5y agoThat makes a lot of sense for file sizes—otherwise, common dependencies patch versions apart would be duplicated many time, and it would block you from upgrading a library's dependency for a security fix. You still get the important part of reproducible builds for your program. Rust's Cargo behaves the same way.