Vincent Voyer vvo

As of writing this, npm@3 is out but shrinkwrap as even more issues. Stay with npm@2 for now.

We use shrinkwrap, because https://gist.github.com/vvo/84a94cfc0f94c91ea6b6.

We shrinkwrap both dependencies and devDependencies, otherwise the build and testing is not consistent over time.

To update a package, given all the shrinkwrap weird bugs, you have to:

You have a nice library published on npm but asking yourselve if you should declare your dependencies as lodash: "3.10.0" (known as "pin" a dependency) or lodash: "^3.10.0"?

As library authors we should not pin dependencies but ask our users to do use npm shrinkwrap in their own app.

Here's why:

Pinning dependencies will result in duplicated code and modules in builds

If you pin your dependencies the issue is that anyone using your module will may not benefit from shared dependencies. If your module user has lodash: "^3.11.0" then since you declared

	import React from 'react';
	import Label from './Label';

	class Button extends React.Component {
	render() {
	return <div onClick={this.props.click}><Label name={this.props.name} /></div>;
	}
	}

	export default Button;

	import React from 'react';
	import Label from './Label';

	class Button extends React.Component {
	render() {
	return <div><Label name={this.props.name} /></div>;
	}
	}

	export default Button;

	<!DOCTYPE html>
	<html>
	<head>
	<title></title>
	</head>
	<body>
	<h1>Title</h1>

	<script src="/bundle.js"></script>
	</body>

	// hello world
	var algoliasearch = require('algoliasearch');
	var client = algoliasearch('latency', '6be0576ff61c053d5f9a3225e2a90f76', {protocol: 'http:'});

	var query = 'ab';

	client.startQueriesBatch();
	client.addQueryInBatch(
	'contacts', // index name
	query, {

	var AlgoliaSearch = require('algolia-search');

	var client = new AlgoliaSearch('latency', '6be0576ff61c053d5f9a3225e2a90f76');

	var index = client.initIndex('contacts');

	index.search('a', function() {
	console.log(arguments);
	});

	var woofmark = require('woofmark');
	var dragula = require('dragula');

	var test = require('tape');
	var jade = require('jade');

	test('it should keep whitespace between tags if any', function(t) {
	t.plan(1);
	var fn = jade.compile('input\ninput');
	t.equal(fn(), '<input/> <input/>');
	});

	function removePrivateProperties(dirty) {
	return Object.keys(dirty).reduce(function(clean, keyName) {
	if (keyName.indexOf('_') === 0) {
	return clean;
	}

	var value = dirty[keyName];

	if (typeof value === 'object' && Object.keys(value).length > 0) {
	value = removePrivateProperties(value);