Now we are using npm, but facing some problems: 1. We are committing `package-lock.json`. If a contributor uses npm@6, there will be lots of carets before version number `"^1.0.2"`. However, if another contributor uses npm@5, there will not be carets. See https://github.com/npm/npm/issues/20434#issuecomment-386815163. 2. An issue regarding non-optional packages. See https://github.com/coala/gh-board/pull/87
Now we are using npm, but facing some problems:
We are committing
package-lock.json. If a contributor uses npm@6, there will be lots of carets before version number"^1.0.2". However, if another contributor uses npm@5, there will not be carets. See npm install changes package-lock.json from exact versions to loosly versions npm/npm#20434 (comment).An issue regarding non-optional packages. See package-lock.json: Include only non-optional packages #87