[jira] [Created] (TEZ-3285) Tez UI: Lock down dependency versions using npm-shrinkwrap

["Sreenath Somarajapuram (JIRA)" <ji...@apache.org>]

Sreenath Somarajapuram created TEZ-3285:
-------------------------------------------

             Summary: Tez UI: Lock down dependency versions using npm-shrinkwrap
                 Key: TEZ-3285
                 URL: https://issues.apache.org/jira/browse/TEZ-3285
             Project: Apache Tez
          Issue Type: Bug
            Reporter: Sreenath Somarajapuram
            Assignee: Sreenath Somarajapuram


All dependencies of tez-ui is having fixed versions. But the dependencies of our dependencies are not. Hence a level down in the dependency tree, the build might be looking for the latest packages. This affects the reliability of the UI build.

NPM:
npm shrinkwrap create a separate json from the currently installed packages, and ensure that the complete dependency tree is intact across all the build.

Bower:
Bower doesn't have a hierarchy and this issue can be avoided by locking on a specific version for all dependent package in the bower.json itself.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)