3 ms·
To add to this: the hash in the lock file is the checksum of the published tarball, not the commit hash.
by whilenot-dev 1y ago
To add to this: the hash in the lock file is the checksum of the published tarball, not the commit hash.
- cluckindan 1y agoAnd then someone runs `npm install` on their CI