3 ms·
Notably, a lockfile does not solve this problem either.
by jameslars 1y ago
Notably, a lockfile does not solve this problem either.
- omcnoe 1y agoTrue, but the lockfile is imposed at build time. Swapping out the version of a transitive dependency might build totally fine, but also might result is broken behaviour at runtime if the behaviour of the dependency changed.