Just lost a whole night of productivity trying to bump *one* dependency exactly *one* version.
2 hours later I've done at least 3 bisecting operations on 3 different repos, can't get #pnpm to install the same thing twice, and still haven't got the lockfile updated to the latest version.
This isn't entirely the fault of #NPM / pnpm. But I manage dependencies very precisely and deliberately with a reproducible build system using pinned dependencies.
If I'm having this much trouble with it, I don't know how typical web devs can manage at all. I didn't make any meaningful progress on the problem I was *actually* trying to solve. All I have to show for my efforts is a red CI.
@develwithoutacause if you’re looking for more reasons to yell at NPM this is a good one https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem