IME npm sucks even more that Java if you really need to change repositories ( not just proxy ). I was stuck under very old (and deprecated) versions of node an

IME npm sucks even more that Java if you really need to change repositories ( not just proxy ). I was stuck under very old (and deprecated) versions of node and NPM, and at my $OLDJOB lockfiles were respected with a CI under restrictive proxy service and alternative npm repo. "delete lockfile, npm install everything again with correct repository under VPN" was a very recurring thing on every project where someone thought "it's just a npm install, what could go wrong?".