2 ms·
"If user A (repo copy 1) adds a package with `^1.0.0` but the lockfile indicates `^1.0.11`" NPM lockfiles can't indicate `^1.0.11` so I believe this is where y
by danenania 5y ago
"If user A (repo copy 1) adds a package with `^1.0.0` but the lockfile indicates `^1.0.11`"
NPM lockfiles can't indicate `^1.0.11` so I believe this is where you're mistaken. They point to a specific version (`=1.0.11`) just like you're saying they should.