[OE-core] Fun with npm shrinkwrap

[Davis, Michael]

> In fact, meta-nodejs is already in use here, and I've been told to give
> "inherit npm-base" a try. Is that what you mean?

Yes inherit npm-base should give you what you need. With the before mentioned limitations.

> How "unreproducible" will builds become? The license checks are not that
> critical as I wouldn't trust them right now anyway. Offline builds
> correlate with reproduciblilty - we need to archive the artifacts and
> generate images with changes later on, independent of what happened
> outside meanwhile. Not a killer right now, but not an option on the long
> run.

Mostly it just means you may get slightly different versions of dependencies over time.
Depending mostly on how locked down your package.json and those of your deps are.
https://docs.npmjs.com/misc/semver


> PS: Top-posting is considered evil.
The sad shame of having to use Outlook.  No IMAP / POP and davmail hates me.
Bottom-posting is dying a slow death these days.  Only see it in Linux mailing lists for the most part.

--
Mike