> The packages won't change on npm and you'll always get the same version for all sub-dependencies.
Until they decide to stop hosting old versions you need, because reasons.
Until they decide to stop hosting old versions you need, because reasons.
Though I agree, over reliance on just npm can be a bad thing (the 2016 issue over kik)