Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Pnpm has a new setting to stave off supply chain attacks. Parent comment
> Do they just mean package.json here?
Yes, most likely. A package-lock.json always specifies an exact version with hash and not a "version X or newer".
There are no comments on this comment yet.
> Do they just mean package.json here?
Yes, most likely. A package-lock.json always specifies an exact version with hash and not a "version X or newer".