Skip to content

Commit

Permalink
Update NPM_Security_Cheat_Sheet.md (#1409)
Browse files Browse the repository at this point in the history
Minor typo fix for "along side".
  • Loading branch information
CaptainTurk committed May 23, 2024
1 parent 3e0c7fc commit 957b043
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cheatsheets/NPM_Security_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ In January 2019, npm shared on their blog that they added a [mechanism that auto

## 2) Enforce the lockfile

We embraced the birth of package lockfiles with open arms, which introduced: deterministic installations across different environments, and enforced dependency expectations across team collaboration. Life is good! Or so I thought… what would have happened had I slipped a change into the project’s `package.json` file but had forgotten to commit the lockfile along side of it?
We embraced the birth of package lockfiles with open arms, which introduced: deterministic installations across different environments, and enforced dependency expectations across team collaboration. Life is good! Or so I thought… what would have happened had I slipped a change into the project’s `package.json` file but had forgotten to commit the lockfile alongside of it?

Both Yarn, and npm act the same during dependency installation . When they detect an inconsistency between the project’s `package.json` and the lockfile, they compensate for such change based on the `package.json` manifest by installing different versions than those that were recorded in the lockfile.

Expand Down

0 comments on commit 957b043

Please sign in to comment.