4 ms·
specify specific versions in your npm or pip package list lol.
by PHGamer 5y ago
specify specific versions in your npm or pip package list lol.
- mindwok 5y agoEven better, specify by hash - Poetry for Python does this by default. This will prevent cases where malicious actors replace existing versions that you might have pinned to.
- ammo1662 5y agoYes, package.lock is used by default now. But when you do want to update the dependencies. It will update thousands of libraries at the same time. However it is a problem of the eco system, not package manager.