What is the difference between yarn.lock and npm's shrinkwrap?
Recently I tried installing my Node packages with Yarn. It works great and it's a lot faster than NPM. Yarn automatically generates yarn.lock . We already have NPM shrinkwrap ( npm-shrinkwrap.json ). Is there any difference between them? Does yarn.lock has any advantage over npm-shrinkwrap.json? Aurora0001 The yarn.lock file is quite similar to other package managers' lock files, especially Rust's Cargo package manager, which has Cargo.lock . The idea of these lock files is to represent a consistent set of packages that should always work. npm stores dependency ranges in the package.json file,