Potential bug with shrinkwrapped dependencies

[jmreidy]

Grunt has async as a dependency. The weird behavior is the following:

npm install --save-dev async@0.1.22 - async is installed as a dependency.
npm install --save grunt - grunt is installed; it does not install async as a dependency for itself (ie grunt/node_modules/async does not exist)

npm shrinkwrap then (correctly) does not include async as a dependency for grunt, since it's not in grunt's node_modules directory. But that's obviously a problem for npm install --production.

[smikes]

I confirm that I can reproduce the behavior described above with latest npm - npm@2.1.8 as of today.

This may be fixed by the upcoming multi-stage install feature, planned for npm@3

A potential workaround, mentioned in #4036, is to use

$ npm shrinkwrap --dev

[smikes]

/cc @othiym23 This should be labeled 'bug', I think

[othiym23]

So noted, but I'm also going to add this to the multi-stage install milestone (att'n @iarna) so it gets looked at soonish.

[iarna]

This is now fixed in the npm/npm#multi-stage branch.