raphinesse edited a comment on pull request #422: URL: https://github.com/apache/cordova-cli/pull/422#issuecomment-668568170
> Do we still need this PR since we ship a package-lock.json file? Yes. In fact `npm-shrinkwrap.json` would replace `package-lock.json`. In contrast to the latter, the former is distributed with packages and used when installing them. Thus it is intended for CLI packages etc. For more details see https://docs.npmjs.com/files/shrinkwrap.json Like discussed above, this would have the benefit of actually freezing a release and the drawback of increased bugfix turnaround time, given our release process ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
