Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

True, but it's common to have requirements of the form "^1.0.0" (especially since this is the default of npm i --save). It's easy to publish a new version that would be installed by a project declaring a dependency in this form.


Yes, but it's trivial to pin your dependencies exactly. That's not a reason to avoid small modules.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: