NPM is rather infamous for not exactly respecting the lockfile, however.

		zdragnar 4 months ago \| parent \| context \| favorite \| on: You too can run malware from NPM (I mean without c... NPM is rather infamous for not exactly respecting the lockfile, however.