Douglas Wilson

> > I but without actively locking the threads, they get forgotten about until someone posts in it just like we didn't want in the first place > > I...

@rlidwka if you needed an example: https://github.com/strongloop/express/issues/1181#issuecomment-52599087

sure

@rlidwka what about @Fishrock123 's "thing" suggestion?

right. the only reason i wanted to be aggressive about it was otherwise they would just never get locked. if we had a script that would go through all the...

I was looking at bundled dependencies not too long ago and needed some answers before doing that: Does it simply include the node_modules dir in the tar ball? Is there...

@Raynos, we don't even bother running npm install for deployments and instead our deployments are static zipballs with all their dependencies already included. This is so we do not have...

Anyway, if it picks up changes in node_modules dir of the author, it raises the chances of a bad package being published, especially when node_modules is not VC-tracked so it's...

I would say that if any dependencies are going to be bundled, they should also get checked into git as a good rule.

FWIW I am also not very inclined to use bundled dependencies, mainly because there are various issues surrounding it, though other projects are free to do it if they wish....