NPM shrinkwrap

[citizenos]

NPM shrinkwrap

[tiblu]

Notes on shrinkwrap

• Always install/update/uninstall dependencies with NPM cli commands (npm install/update/uninstall), this keeps dependencies in check.
• The versions to be installed are described in npm-shrinkwrap.json, DO NOT modify it by hand. Use npm shrinkwrap to generate.
• After modifying dependencies AND making sure the dependencies work, new npm-shrinkwrap.json needs to be generated using npm shrinkwrap
  • WARNING: npm-shrinkwrap.json file is generated based on the current structure of node_modules directory. That means - if you experiment, don't forget to remove these as they will be added to npm-shrinkwrap.json

Reading:

• http://npm.github.io/using-pkgs-docs/shrinkwrap/index.html
• https://nodejs.org/en/blog/npm/managing-node-js-dependencies-with-shrinkwrap/

[tiblu]

@ilmartyrk We're going use shrinkwrap for all of our Node projects. If we touch any of our Citizen OS projects, let's add shrinkwrap. The etherpad-lite-heroku may be a tricky one, but for the rest it should be quite straightforward.

For further reading see comment #13 (comment)