[GitHub] [cordova-cli] raphinesse commented on pull request #422: Add missing npm-shrinkwrap.json

[GitBox <gi...@apache.org>]

raphinesse commented on pull request #422:
URL: https://github.com/apache/cordova-cli/pull/422#issuecomment-668568170


   > Do we still need this PR since we ship a package-lock.json file?
   
   Yes. In fact `npm-shrinkwrap.json` would replace `package-lock.json`. In contrast to the latter, the former is distributed with packages and used whern installing them. Thus it is intended for CLI packages etc. For more details see https://docs.npmjs.com/files/shrinkwrap.json
   
   Like discussed above, this would have the benefit of actually freezing a release and the drawback of increased bugfix turnaround time, given our release process


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org