Hacker News new | ask | show | jobs
by u801e 3080 days ago
What if the project that requires order_pizza has no restriction on what version it pulls in?
1 comments
krainboltgreene 3080 days ago 

  - It still wouldn't be silent or automatic
  - npm-based projects have a package lock
link