Embed Notice

@civodul npm helped build the semver standardization into people's brains.

Between semver versioning being "wanted" packages and lockfiles, it made it super easy to kind of make certain guarantees about your dependency tree, even when that dependency was maintained by a third party.

That dependency pinning is so hard in guix is actually something that is a neverending headache for me and package management, personally.