Managing Local Package Dependencies with Yarn Workspaces
Learn how to implement Yarn Workspaces to manage multiple packages in a single repository, optimize dependency hoisting, and link local packages without manual publishing.
ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Learn how to implement Yarn Workspaces to manage multiple packages in a single repository, optimize dependency hoisting, and link local packages without manual publishing.
Learn how to use Bower’s overrides object to lock transitive dependencies to a specific version, with a concrete example, verification steps, and a discussion of trade‑offs.
When your team’s PHP versions drift, dependency resolution can break. Composer’s `config.platform` lets you emulate a specific PHP runtime during installs, ensuring the same lockfile everywhere. Learn how to set it up, what it does, and its trade‑offs.
Decide where each non-core dependency lives in a Poetry project: groups for internal tooling, extras for user-facing optional features, markers for platform conditions — with a concrete pyproject.toml layout, install commands per environment, and validation steps.
The goal is to guarantee a reversible upgrade path when a NestJS major release alters decorator signatures or DI configuration, allowing teams to restore the pre‑upgrade state without losing uncommitted work. The nest update CLI speeds up dependency resolution to the latest compatible versions but provides no built‑in mechanism to revert transitive changes,
Use npm ci for clean, reproducible dependency installs. Learn prerequisites, exact steps, verification, and recovery when the lockfile is out of sync.
Centralise dependency versions with <code><dependencyManagement></code> and drop unwanted transitive libraries using <code><exclusion></code>. A worked POM example shows how to keep a multi‑module build conflict‑free, with verification steps and common pitfalls highlighted.
After a NuGet package upgrade introduces breaking changes, the recovery decision is between a manual version downgrade and restoring a previously committed packages.lock.json. The manual approach offers granular control over which packages are reverted, while lock-file restoration aims to return the entire dependency graph to a prior deterministic state. The
I am using nimble develop to co-develop two interdependent Nim packages. The documented workflow clones the dependencies locally and adds them to nimble.paths , so local edits are compiled instead of the installed copies. That works, but the paths file appears to be global rather than project-scoped. My concern is the permission boundary: once a package is i