• freewheel@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    1 month ago

    Little late to the party here, and I’m not primarily a js dev, but… yes. It looks like it’s one of those syntactic sugar kind of packages that devs love to use. The bonus here is you can probably use a find-grep kind of process to check package-lock.json for references to the package. (there might be an npm command, but like I say - not a js dev.)

    For example:

    $ grep \"is\"\: package-lock.json
            "is": "^3.3.0",