undefined | Better HN

0 pointswhilenot-dev6mo ago0 comments

To add to this: the hash in the lock file is the checksum of the published tarball, not the commit hash.

0 comments

And then someone runs `npm install` on their CI

j / k navigate · click thread line to collapse

0 pointswhilenot-dev6mo ago0 comments

To add to this: the hash in the lock file is the checksum of the published tarball, not the commit hash.

And then someone runs `npm install` on their CI

j / k navigate · click thread line to collapse