This document discusses Yarn and its advantages over npm. It notes that Yarn uses yarn.lock files instead of npm-shrinkwrap.json files to lock down dependency versions. Yarn is also described as being faster, able to work offline by caching dependencies, and potentially more secure than npm with features like flat mode and module folders. The document suggests Yarn may handle dependencies and devDependencies differently than npm, and questions whether the yarn.lock file should be committed to source control.

1. yarn.lock
@teppeis
#tng24
March 31, 2017

2. Hello!
• Teppei SATO, @teppeis
• Cybozu, Inc. / kintone Corp.

3. https://scotch.io/tutorials/yarn-package-manager-an-improvement-over-npm

4. Yarn
• yarn.lock instead of npm-shrinkwrap.json
• fast, offline, cache
• secure?
• --flat, --module-folder
https://yarnpkg.com/

5. https://www.berriart.com/blog/2016/10/npm-yarn-benchmark/

6. https://gist.github.com/othiym23/c98bd4ef5d9fb3f496835bd481ef40ae

7. Yarn
• npm@5 2017
• yarn npm@5
• yarn Node.js io.js
• Yak shaving
• private npm registry
•

9. https://twitter.com/othiym23/status/819684484970778624

10. npm@5 …

11. yarn …

12. yarn.lock

13. yarn.lock
•
• yarn.lock

14. •
yarn.lock/npm-shrinkwrap.json
npm install/yarn install
semver
• CI
yarn.lock/npm-shrinkwrap.json

15. • /CI
•
• minor

16. Yarn
https://yarnpkg.com/

17. https://yarnpkg.com/blog/2016/11/24/lockfiles-for-all/

18. deps << devDeps
• npm dependencies
devDependencies
• babel, webpack, eslint 509
• breaking changes
devDependencies

19. devDeps
•
• OSS
•
•

20. •
breaking change
install upgrade
•
• install

21. •
•
•

22. yarn.lock

24. •
• yarn.lock
• devDeps
deps
• deps devDeps

25. Do you `git commit yarn.lock` ?
https://yarnpkg.com/