---

This package modifies package-lock.json to force the installation of specified versions of a set of transitive dependencies (dependencies of dependencies).

---

Getting started

1. Add a field resolutions with the dependency version you want to fix at the main level of your package.json.

Example:

"resolutions": {
  "ssri": "8.0.5"
}

2. Add force-resolutions to the preinstall script so that it patches the package-lock.json file before every npm install:

"scripts": {
  "preinstall": "npx force-resolutions"
}

3. Install dependencies

npm install

Remember that whenever you run npm install, the preinstall command will run automatically.

If a package.lock.json is not detected the script will not run, and any other command after it will be executed as normal.

4. To confirm that the right version of the package you are trying to override was installed, use:

npm ls ssri

---

Running this repository locally

NodeJS and NPM versions NodeJS version:

v16.13.1

NPM version:

8.1.2

Instructions

1. Install the dependencies of the project:

npm install

2. Build the project:

npm run build

3. Go to the dist folder

cd dist

3. Copy a package.json and a package-lock.json file into the dist folder

4. Add a resolutions field in the package.json and inside of it a package to override

5. Run the compiled file

node index.js

5. Search in the package-lock.json to see that the versions of the packages are updated

---

Why this project was created

This project was created because npm-force-resolutions became not suitable for the necesities the team I was working in had. We needed to avoid triggering the execution of the script when there was no package-lock.json, descriptive error logs, descriptive logs during the execution, faster download times, compatibility with multiple npm versions and faster execution times.

---

Overrides, the new way of doing resolutions

NPM released a new way to handle resolutions, now there is a property on package.json to do them, is called overrides. If you are using recent versions of node and npm you probably don't need this package. You can read more about overrides here:

NPM overrides documentation

---

Discord community

To simplify communication I have created a discord community, if you detect an issue with this package or want to improve it in some way, you can contact me here. Normally I am busy with work, but if you contact me here I'll reply faster.

Join discord community

---

NPM

Find the package on NPM

See other versions of the package on NPM

---

Acknowledgments

This project was inspired by the next package: npm-force-resolutions.

Special thanks to Denis Gulin for contributing to fix issues that were happening with the package and improving the code.