I mean yeah, you’re right. But in practise npm allows you to wildcard version numbers. And when you come across old npm projects, you’re likely dealing with peo

I mean yeah, you’re right. But in practise npm allows you to wildcard version numbers. And when you come across old npm projects, you’re likely dealing with people that have wildcarded their dependency versions. Sure if you start from scratch you can adopt idioms that work for you, but in general you’re more likely to get into dependency messes with npm than maven from my experience largely because of the wide use of patterns instead of locked down versions being pulled in.