npm Updates: Love 'em or Hate 'em? on Web Rush #283

Is upgrading via npm worse now than it used to be, or are there things that can be done to help you when you're needing to upgrade a project? Can CoPilot help with knowing what the security risks are before upgrading? And what is a peer dependency error?

Direct link to the episode.

Host(s):

• John Papa @John_Papa
• Ward Bell @WardBell
• Craig Shoemaker @craigshoemaker

Recording date: May 23, 2024

Brought to you by

• AG Grid

• IdeaBlade

Resources:

• npm audit
• How to Update npm Dependencies
• Angular’s ng update upgrade command
• Security vulnerability mitigation with npm audit fix commands
• What is the latest version of Node
• NVM Install guide
• What’s a peer dependency vs devDependency vs dependency
• Peer Dependencies

Timejumps

• 00:27 npm shaming?
• 02:57 Is upgrading via npm worse now than it used to be?
• 11:47 Sponsor: Ag Grid
• 12:37 Does how much of an upgrade you're doing matter with npm?
• 22:13 Sponsor: IdeaBlade
• 23:00 Getting the wrong version of node
• 26:01 What if I get a "peer dependency error" issue?
• 29:53 Would CoPilot be helpful here?

Podcast editing on this episode done by Chris Enns of Lemon Productions.