-
It makes no sense why
npm ci
andyarn install --frozen-lockfile
are not the default options -
or why pinning exact versions in the package.json isn't a default option too
-
the fear of running
npm install
on a legacy app and accidentally breaking something is real -
or how you can
npm i some-pkg
to add just that one, but if you edit package.json and runnpm i
then it must mean you want to download the whole internet again