-
It makes no sense why
npm ciandyarn install --frozen-lockfileare not the default options -
or why pinning exact versions in the package.json isn't a default option too
-
the fear of running
npm installon a legacy app and accidentally breaking something is real -
or how you can
npm i some-pkgto add just that one, but if you edit package.json and runnpm ithen it must mean you want to download the whole internet again