3 ms·Package-lock.json pins only first-order dependencies2 points by mikehall314 5y agometaloha 5y agoDoesn't using `npm ci` instead of `npm install` keep transitive dependencies pinned as well?deleted 5y ago[deleted]