5 ms·
Sorry, without a minor version change. You can easily publish a patch version and most people don't pin that part of their dependency.
by thinkingkong 5y ago
Sorry, without a minor version change. You can easily publish a patch version and most people don't pin that part of their dependency.
- LunaSea 5y agoThey don't need to pin it directly. They only need to "npm ci" (based on package-lock.json) instead of "npm install" (based on package.json) within the Docker container to get a fully reproducible build.