Yarn at least includes a hash of the tarball in the lockfile, so even if npm’s i...

		epmatsw on Jan 10, 2022 \| parent \| context \| favorite \| on: Dev corrupts NPM libs 'colors' and 'faker', breaki... Yarn at least includes a hash of the tarball in the lockfile, so even if npm’s immutability fails somehow you’ll at least know.