Hacker News new | ask | show | jobs
by ng12 1770 days ago
In curious why you feel the need to do that? I typically only update dependencies either for serious security issues or new features I really, really want to use.

I still have a few projects running Webpack 1 without issue.

2 comments

Large companies often have security mandates that dependencies should be regularly updated.
Well, sure. Dogmatic policies like that will cause all kinds of problems.
I used to do this on rails projects. Then 3 years later you're running all ancient libraries, and you need to upgrade one with dependencies that conflict with your older locked versions. So now instead of dealing with one thing at a time, I've got 30 libraries (many not even direct dependencies) that have all got to get upgraded, and it's a nightmare to unwind and update it all.