How I write back ends

Re:How I write back ends by bluehatbrit on Wednesday January 22, 2020 @09:57AM (#22118014)

This is correct, the few dependencies you would use would need to also target very specific versions to achieve the same.

Lock files are used to lock dependency versions all the way down your dependency tree, not just your immediate dependencies.

[ Parent | on HN ]

Re:How I write back ends by fpereiro on Wednesday January 22, 2020 @10:19AM (#22118228)

Unfortunately this seems to be the case; lockfiles would be unnecessary only if all your dependencies (and their dependencies, recursively all the way down) reference explicit versions, the risk being that a new malicious version would be published. I'll research if there's a workaround.

Thanks everyone for pointing out this issue.

[ Parent | on HN ]

Re:How I write back ends by bluehatbrit on Thursday January 23, 2020 @12:57PM (#22129891)

In my opinion a lock file really is the "work around", I don't see a huge issue in using them since it's given for free by npm and yarn with no additional overhead.

[ Parent | on HN ]