News for hackers. Stuff that matters.
Re:So you want to write a package manager by mook on Saturday February 13, 2016 @06:45PM (#11096278)
npm-shrinkwrap [1] (mentioned in the article) is supposed to help with this; it makes a lock file (npm-shrinkwrap.json) that records the resolved version.

I think it got started being used at work (by stuff I wasn't working on) because trying to install old code that hasn't changed broke because some HTTP proxying middleware for Express changed APIs or something.

[1]: https://docs.npmjs.com/cli/shrinkwrap

Re:So you want to write a package manager by sdboyer on Saturday February 13, 2016 @07:34PM (#11096465)
fwiw, folks on twitter suggested to me that npm may be moving in something like my "sync-based PDM" direction:

https://twitter.com/rebeccaorg/status/698370989386694657