Comment on You too can run malware from NPM (I mean without consequences)parentComments−whilenot-dev1ypackages published to npm are immutable.Depends how you'd refer to them... tags ("@latest", "@next" etc.) are not immutable and it's best to rely on the checksums in the lock file.
Comments
Depends how you'd refer to them... tags ("@latest", "@next" etc.) are not immutable and it's best to rely on the checksums in the lock file.