{"action":"created","issue":{"url":"https://api.github.com/repos/yarnpkg/yarn/issues/838","repository_url":"https://api.github.com/repos/yarnpkg/yarn","labels_url":"https://api.github.com/repos/yarnpkg/yarn/issues/838/labels{/name}","comments_url":"https://api.github.com/repos/yarnpkg/yarn/issues/838/comments","events_url":"https://api.github.com/repos/yarnpkg/yarn/issues/838/events","html_url":"https://github.com/yarnpkg/yarn/issues/838","id":182467072,"number":838,"title":"Shrinkwrap file from added packages are ignored ","user":{"login":"kanongil","id":753512,"avatar_url":"https://avatars.githubusercontent.com/u/753512?v=3","gravatar_id":"","url":"https://api.github.com/users/kanongil","html_url":"https://github.com/kanongil","followers_url":"https://api.github.com/users/kanongil/followers","following_url":"https://api.github.com/users/kanongil/following{/other_user}","gists_url":"https://api.github.com/users/kanongil/gists{/gist_id}","starred_url":"https://api.github.com/users/kanongil/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kanongil/subscriptions","organizations_url":"https://api.github.com/users/kanongil/orgs","repos_url":"https://api.github.com/users/kanongil/repos","events_url":"https://api.github.com/users/kanongil/events{/privacy}","received_events_url":"https://api.github.com/users/kanongil/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":24,"created_at":"2016-10-12T08:39:25Z","updated_at":"2016-12-21T13:19:47Z","closed_at":"2016-10-12T10:04:11Z","body":"<!-- *Before creating an issue please make sure you are using the latest version of yarn.* -->\n\n**Do you want to request a _feature_ or report a _bug_?**\n\nBug.\n\n**What is the current behavior?**\n\nYarn doesn't respect the `npm-shrinkwrap.json` contained inside added dependencies, like [hapi](https://github.com/hapijs/hapi/blob/master/npm-shrinkwrap.json), and chooses to install the latest semver compatible versions declared in its `package.json` instead.\n\n**If the current behavior is a bug, please provide the steps to reproduce.**\n\n`yarn add <package-with-shrinkwrap>`\n\n**What is the expected behavior?**\n\nInstallation of the exact versions declared in `npm-shrinkwrap.json`, including sub-dependencies. Alternatively, a visible warning that the file has been ignored, and the install might be broken due to this.\n\nNote that it is an important feature that a package can specify the exact dependency version requirements.\n\n**Please mention your node.js, yarn and operating system version.**\n\nyarn v0.15.1\n"},"comment":{"url":"https://api.github.com/repos/yarnpkg/yarn/issues/comments/268521110","html_url":"https://github.com/yarnpkg/yarn/issues/838#issuecomment-268521110","issue_url":"https://api.github.com/repos/yarnpkg/yarn/issues/838","id":268521110,"user":{"login":"kanongil","id":753512,"avatar_url":"https://avatars.githubusercontent.com/u/753512?v=3","gravatar_id":"","url":"https://api.github.com/users/kanongil","html_url":"https://github.com/kanongil","followers_url":"https://api.github.com/users/kanongil/followers","following_url":"https://api.github.com/users/kanongil/following{/other_user}","gists_url":"https://api.github.com/users/kanongil/gists{/gist_id}","starred_url":"https://api.github.com/users/kanongil/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kanongil/subscriptions","organizations_url":"https://api.github.com/users/kanongil/orgs","repos_url":"https://api.github.com/users/kanongil/repos","events_url":"https://api.github.com/users/kanongil/events{/privacy}","received_events_url":"https://api.github.com/users/kanongil/received_events","type":"User","site_admin":false},"created_at":"2016-12-21T13:19:47Z","updated_at":"2016-12-21T13:19:47Z","body":"@Turbo87 I appreciate the time @wycats took to write a response but, while lengthy and interesting, it doesn't actually attempt to solve the issue. Right now I'm just interested in the project acknowledging that there is an issue.\r\n\r\nOnce it has been acknowledged, work might start on a solution which could be any of these:\r\n\r\n1. Clearly note that the yarn philosophy robs package authors of an existing ability to manage the install.\r\n1. Warn when shrink-wrapped dependencies of an added / updated package doesn't match.\r\n1. Warn when an added / updated package contains an ignored shrinkwrap.\r\n1. Somehow find a technical solution that installs the expected dependencies."}}
{"actor":{"display_login":"kanongil"}}