Difference between yarn/npm5 lockfiles and exact package versions?
问题 My simple question is: why can't I just use exact versions in my package.json? How is this different from a lockfile? 回答1: The main difference is that lockfiles also lock nested dependencies - all of the dependencies of your dependencies, and so on. Managing and tracking all of those changes can be incredibly difficult, and the number of packages that are used can grow exponentially. There are also situations where you cannot manually specify that a particular version of a package should be