3 ms·
NPM default "package-lock.json" lock files only prevent your immediate dependencies from changing. If a transitive dependency (the majority of them) have chang
by ElectricalUnion 5y ago
NPM default "package-lock.json" lock files only prevent your immediate dependencies from changing.
If a transitive dependency (the majority of them) have changed, you're out-of-luck.
- maxloh 5y agoIf I recall it right, `npm ci` installs the exact same version defined in package-lock.json, for all dependencies.