npm force package-lock to update a sub-dependency package
问题 Due to some code vulnerability, I am trying to update a sub-dependency. The package is snapdragon, currently I have the version 0.8.2 installed, but I wish to upgrade to the latest 0.12.0 . I have updated all the packages that require snapdragon as a dependency. Now according to those packages package.json they require "^0.8.1" which should namely support 0.12.0 as well. Here's the result of npm ls snapdragon : ├─┬ nodemon@1.19.2 │ └─┬ chokidar@2.1.8 │ └─┬ braces@2.3.2 │ └── snapdragon@0.8.2