Yarn – A new package manager for JavaScript

Re:Yarn – A new package manager for JavaScript by mvindahl on Wednesday October 12, 2016 @01:42AM (#12690646)

But can yarn fix this?

Say that I use yarn to depend upon some module X, specifying a fixed version number like the good boy scout that I am. Module X resides on npmjs and in turn depends upon the bleeding edge version of module Y. And then one day module Y goes all Galaxy Note and bursts into flames.

Can yarn shield my app from that?

[ Parent | on HN ]

Re:Yarn – A new package manager for JavaScript by nilliams on Wednesday October 12, 2016 @02:37PM (#12695424)

Yes it claims to provide a lockfile while locks all your deps all the way down the dependency tree.

You can do (and are supposed to do) the same with npm's own shrinkwrap, but people claim that it doesn't work as intended.

[ Parent | on HN ]