Package-lock.json pins only first-order dependencies(twitter.com)

https://twitter.com/brianleroux/status/1480905580873072643

1 comments

metaloha5 anni fa

Doesn't using `npm ci` instead of `npm install` keep transitive dependencies pinned as well?

[deleted]5 anni fa