Jason Walton • 2/22/2022

Node.JS: Upgrading indirect dependencies

This technical article addresses the common Node.js problem of upgrading indirect dependencies (like promise-breaker) that are not listed in your package.json. It explains semantic versioning (SemVer), the meaning of caret (^) and tilde (~) ranges in dependency declarations, and provides practical guidance on how to force upgrades or resolve version locks, especially when dealing with security vulnerabilities in nested packages.

0 comments

#Node.js #npm #package.json