re: 📦 How to publish your package on npm VIEW POST


Great summary article. The missing point is about the dependencies version management.

NPM modules suffer from the ~ ^ in the version numbers. Although semver may enforce no changes in the dependencies api, their devs are humans too and may break things.

Therefore, we should enforce module managers to "hardcode" the dependency version. This would also be a step towards reproduceable builds.

code of conduct - report abuse