Re:We shouldn't have needed lockfiles
by zakius on Thursday August 07, 2025 @03:18AM
(#44821531)
lockfiles are useful to speed things up, you avoid waterfalling
and as some people mentioned, if a dependency of a dependency provides an important security patch, do you want to wait for your dependency to update first? or do you rely on overrides?
and as some people mentioned, if a dependency of a dependency provides an important security patch, do you want to wait for your dependency to update first? or do you rely on overrides?