I’ve been considering checking node_modules into source control for some time now, has anyone else done that successfully? There would be a variety of benefits:
1. Eliminate redownload of packages on every CI build
2. Reduce the amount of gigantic IO operations from unpacking the tens-of-thousands of files sitting in node_modules.
3. Better security: code checked in can be audited better if not downloaded every single CI build.
yarn’s PnP system is promising for the zero-install paradigm, but it doesn’t seem quite ready yet (so many packages don’t seem to get their dependencies right).
1. Eliminate redownload of packages on every CI build 2. Reduce the amount of gigantic IO operations from unpacking the tens-of-thousands of files sitting in node_modules. 3. Better security: code checked in can be audited better if not downloaded every single CI build.
yarn’s PnP system is promising for the zero-install paradigm, but it doesn’t seem quite ready yet (so many packages don’t seem to get their dependencies right).