News for hackers. Stuff that matters.

A comment on Yarn's Future – v2 and beyond.

Re:Yarn's Future – v2 and beyond by jcolella on Thursday January 24, 2019 @11:12AM (#18989923)
The addition of vulnerability scanning was the only reason our company switched back to npm from yarn. Other than that, yarn offers a great experience
[ Parent | on HN ]
Re:Yarn's Future – v2 and beyond by symlinkk on Thursday January 24, 2019 @02:27PM (#18992029)
Yarn has this too (although it uses the NPM audit database): `yarn audit`.
[ Parent | on HN ]
Re:Yarn's Future – v2 and beyond by coolreader18 on Thursday January 24, 2019 @10:51PM (#18995425)
Oh, I didn't know that! Here's some resources about it if you haven't heard of it either:

documentation; https://yarnpkg.com/lang/en/docs/cli/audit/

original feature issue: https://github.com/yarnpkg/yarn/issues/5808

release comment in that issue: https://github.com/yarnpkg/yarn/issues/5808#issuecomment-441...

[ Parent | on HN ]