If my package has these dependencies
{ \"name\": \"my-package\",
\"dependencies\": { \"foobar\":\"~1.0.3\", \"baz\":\"2.0.9\" }
And the <
@SomeCallMeTime's answer is great and we've been doing that for month at work.
Unfortunately, this is not possible anymore since the v0.24.x (see that comment).
There's an opened PR on Github with an RFC proposal to have a simple way of handling that use case without having to keep an eye on the generated lockfile.