NPM dependencies are not locked down by default. Even if you add top level dependencies with fixed version numbers in package.json, there is no guarantee that you will get the exact same code because the sub dependencies are not locked down. This is where npm shrinkwrap comes into the picture. Creating a new shrinkwrapped package cd… Continue reading NPM shrinkwrap