josefbud

6 ms·

1. 1.▲
   by josefbud 1y ago

   I've seen pipelines that cache node modules between runs to save time, but yeah if they're not doing that then you're totally right.
2. 2.▲
   by josefbud 1y ago

   Sorry, I had assumed this was what you were doing when I wrote my question but I should have specified. And sorry for now making your npm install step twice as long! ;)
3. 3.▲
   by josefbud 1y ago

   Yeah, I think I had made the assumption that they were using `npm ci` / `yarn install --frozen-lockfile` / `pnpm install --frozen-lockfile` in CI because that's technically what you're always supposed to do in CI, but I
4. 4.▲
   by josefbud 1y ago

   I'm a little confused on one of the excerpts from your article. > Our package-lock.json specified the stable version 1.3.2 or newer, so it installed the latest version 1.3.3 As far as I've always understood, the lockfile always