When to use Yarn over NPM? What are the differences?

Question

What are the differences between Yarn and NPM? At the time of writing this question I can only find some articles on the Internet showing what\'s the Yarn equvalent of an NP

Answer 1

The answer by @msanford covers almost everything, however, I'm missing the security (OWASP's Known Vulnerabilities) part.

Yarn

You can check them using yarn audit, however, you cannot fix them. This is still an open issue on a GitHub (https://github.com/yarnpkg/yarn/issues/7075).

npm

You can use npm audit fix, so some of them you can fix by yourself.

Both of them, i.e. npm audit & yarn audit have their own Continuous Integration tools. These are respectively https://github.com/IBM/audit-ci (used, works great!) and https://yarnpkg.com/package/audit-ci (haven't used).