Skip to content

locking down packages dependencies

David Sklář edited this page Nov 3, 2017 · 1 revision

Locking down package's dependencies

Sometimes sh*t happens and you have to face package's dependency hell.
Use npm-shrinkwrap to rescue.

Steps

  1. Find out and install tha last working package version

  2. Run shrinkwrap to generate npm-shrinkwrap.json

    npm shrinkwrap --dev
    
  3. Clean-up npm-shrinkwrap.json manualy to lock down only the necessary package's dependencies;
    Be sure to lock the entire dependency tree

  4. Don't forget to bump the package version

Clone this wiki locally