News for hackers. Stuff that matters.
Re:When Not to Use Lock Files with Node.js by paulddraper on Sunday March 15, 2020 @05:50PM (#22587130)
It's a consequence of modularization, and it's not at all unique to Node.js. (Although Node.js has hyper-modularization, so the situation is more pronounced.)

Ruby gem has lock files, Python pip has lock files. I wish everyday that apt/dpkg had lock files.

The balance is between permissive versions (small install size) and pinned versions (reproducibility).

Some situations call for one, some call for the other.

Re:When Not to Use Lock Files with Node.js by j88439h84 on Monday March 16, 2020 @03:38AM (#22590791)
But doesn't Node give each module its own deps? Python can't do this because it doesn't support multiple versions of the same dep.