Update README.md

This commit is contained in:
Yoni Goldberg
2017-10-15 22:09:07 +03:00
committed by GitHub
parent 2f14ce1c93
commit 79224beec0

View File

@ -559,6 +559,7 @@ This simple best practice will help you easily and quickly tell the dependencies
**TL;DR:** Use your preferred tool (e.g. 'npm outdated' or [npm-check-udpates](https://www.npmjs.com/package/npm-check-updates) to detect installed packages which are outdated, inject this check into your CI pipeline and even make a build fail in a severe scenario. For example, a sever scenario might be when an installed package lag by 5 patch commits behind (e.g. local version is 1.3.1 and repository version is 1.3.8) or it is tagged as deprecated by its author - kill the build and prevent deploying this version
**Otherwise:** Your production will run packages that have been explicitly tagged by their author as risky
<br/><br/>