On: NPM and the future of JavaScript

[acemarke]

That sounds odd. The whole point of lockfiles is that they _do_ lock your transitive dependencies.

[0xfeba → acemarke]

Yeah, I know, but we still have CI builds fail that work locally -- until you rm -rf node_modules and install again using the lockfile. The recent addition of hashing seems to be in response to my issues -- I am trying that out now.

[rbrcurtis → 0xfeba]

Always use a clean workspace.