Hacker News Reader

I walked away from reading this thread in GitHub with exactly two points to make:

1. https://docs.npmjs.com/cli/shrinkwrap is a good thing. Please consider doing it for all of your projects using NPM.

2. Consider also putting your node_modules under version control.

Isn't that what yarn.lock and NPM shinkwrap are for? I wouldn't recommend putting the entire node_modules dir in git...

Yes, but there are actually some positive and negative side-effects of checking in dependencies. See “Should I check the Pods directory into source control?” at https://guides.cocoapods.org/using/using-cocoapods.html for a bit of discussion on the concept.

Reply on news.ycombinator.com