Unable to cache based on `npm-shrinkwrap.json`...

[circleci-public]

Unable to cache based on `npm-shrinkwrap.json`...

[gmemstr]

@busticated The newest version of the orb will now handle this use case, and is built in such a way that other package managers for Node that produce lockfiles should be easily supported. Thank you for raising this!

[gmemstr]

I wasn't aware shrinkwrap existed! As far as I can tell, it is most useful when locking dependencies for a module published to npm, and sees little use outside that. I am curious to know how widely this file is used nowadays so I can determine whether it's worth the effort of implementation (the effort is relatively low for naive approach, but we might need to reconsider how we do our caching parameters if we do opt to include this).

[busticated]

from the docs:

npm-shrinkwrap.json is a file created by npm shrinkwrap. It is identical to package-lock.json, with one major caveat: Unlike package-lock.json, npm-shrinkwrap.json may be included when publishing a package.

this is key functionality when shipping more app-like things via npm - for example CLIs - as it ensures exact dependencies are installed. i'm not aware of any plan to deprecate npm shrinkwrap