yarn/npm setup is a mess

mozilla / eslint-plugin-no-unsanitized

Custom ESLint rule to disallows unsafe innerHTML, outerHTML, insertAdjacentHTML and alike

Mozilla Public License 2.0

231 stars 38 forks source link

yarn/npm setup is a mess #248

Open mozfreddyb opened 2 months ago

mozfreddyb commented 2 months ago

We are using yarn.lock and npm's package-lock.json and having both is a mess that we should clear up. I think yarn didn't really win over npm and now both exist. It seems that npm is still pretty much OK? I would prefer if we kept npm and got rid of yarn.

I am not looking for opinions on yarn/npm in this issue.