Misc scribbles

Do you understand your NPM dependencies?


You are writing a library...or you are writing an app and you want to publish some of the components of it as a library...

Here are some questions in the form of comments

Just something to be aware of! You can always ride the dragon and accept these minor breakages from semver bumps, but it can introduce some issues for your consumers

Random fun thing: Adding a yarn package can even downgrade some other packages. For example if you have ^6.0.0 in your package.json, you yarn upgrade it so in the lockfile it says 6.1.0 but then later install another library that requires a hard 6.0.1, yarn will decide to downgrade you to 6.0.1 (it will not have a duplicate entry in yarn.lock, just that the 6.1.0 in the yarn.lock will downgrade to 6.0.1)