Comment by hosh

It’s even worse when npm install modifies the package lock file.

It also doesn’t understand how to get packages from a git source.

From a release engineering perspective, this drives me batty.