undefined | Better HN

0 pointswhilenot-dev9mo ago0 comments

To add to this: the hash in the lock file is the checksum of the published tarball, not the commit hash.

0 comments

1 comments · 1 top-level

And then someone runs `npm install` on their CI

j / k navigate · click thread line to collapse