npm Blog Archive: npm v7 Series - Why Keep `package-lock.json`?

The npm blog has been discontinued. Updates from the npm team are now published on the GitHub Blog and the GitHub Changelog. << Arborist Deep Dive >> Beta Release! One common question we’ve gotten a few times now, once we announce that npm v7 will include support for yarn.lock files, is “Why keep package-lock.json at all, then? Why not just use yarn.lock only?” The simple answer is: because yarn.l

[sh19e]

“Why not just use yarn.lock only?”The simple answer is: because yarn.lock doesn’t fully address npm’s needs, and relying on it exclusively would limit our ability to produce optimal package installs or add features in the future.”

[efcl]

npm 7の依存ツリーについて。 `yarn.lock`をサポートと`package-lock.json`は引き続きあるのはなぜかについて

[uzulla]

“we announce that npm v7 will include support for yarn.lock files” えっそうなの、しらなかった。