How I write back ends

Re:How I write back ends by fpereiro on Wednesday January 22, 2020 @10:19AM (#22118228)

Unfortunately this seems to be the case; lockfiles would be unnecessary only if all your dependencies (and their dependencies, recursively all the way down) reference explicit versions, the risk being that a new malicious version would be published. I'll research if there's a workaround.

Thanks everyone for pointing out this issue.

[ Parent | on HN ]

Re:How I write back ends by bluehatbrit on Thursday January 23, 2020 @12:57PM (#22129891)

In my opinion a lock file really is the "work around", I don't see a huge issue in using them since it's given for free by npm and yarn with no additional overhead.

[ Parent | on HN ]