News for hackers. Stuff that matters.

A comment on Building a Minimalistic Virtual Machine. Parent comment

Re:Building a Minimalistic Virtual Machine by throwaway78941 on Saturday February 25, 2023 @12:40PM (#34938555)
> My ancient ruby code and nodejs code all broke because I didn't pin dependencies. As a result I've got software that is unrunnable.

You can simply remove the ^ symbol from your versions listed in package.json and it will use exactly that version you originally added.

[ Parent | on HN ]
Re:Building a Minimalistic Virtual Machine by maxime_cb on Saturday February 25, 2023 @01:30PM (#34939134)
Besides the issue of whether you pin or don't pin your dependencies, the problem is that node packages can depend on external native code. You can have several more layers of dependencies in there. If, for any reason, those native packages won't install/run on your machine, your dependencies can still break under you, even if you pin them. Python and Ruby have the same vulnerability when it comes to dependencies breaking.
[ Parent | on HN ]