liip/bower-lockfile-resolver

Name: bower-lockfile-resolver

Owner: Liip

Description: adds a missing feature of bower: a lockfile with all pacakages versions pinned

Created: 2015-10-15 08:31:07.0

Updated: 2016-01-28 04:54:13.0

Pushed: 2015-10-15 12:13:49.0

Homepage: null

Size: 375

Language: JavaScript

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

STATUS

Work In on Bower* is hopeless:

status

WAT

Adds a missing feature of bower: a lockfile with all packages versions pinned

WHY

Always track versions you deploy in the production. It will allow you track security vulnerabilities in your releases

HOW

• install with npm install -g bower-lockfile-resolver

• In your .bowerrc add bower-lockfile-resolver

esolvers": [
"bower-lockfile-resolver"

• run bower install The bower.lock will be created. It will contain all currently used packages

TODO

• [ ] autogenerate bower.lock if no bower.lock exits or bower update is called
• [ ] store bower packages hash in bower.lock
• [ ] emit warning if hash stored in bower.lock do not mach bower.json
• [ ] if bower.lock install depedencies based on bower.lock
• [ ] add new dependencies to bower.lock
• [ ] bower