node 项目中如何保证依赖隔离？

Question

I 'm reading the 12-factor-app manifesto and stumbled upon the concept of dependency isolation here . I'm familiar with the concept from working in Python projects using conda . But how can I achieve the same kind of isolation in a nodeJS application?

I had the case in the past where I had eslint installed globally but not defined in package.json in the project. The CI/CD failed later because of a missing dependancies. So I know how much important this can be.

Of course I can always run my apps inside isolated docker containers, but I feel like this is an overkill for local development specially for small projects.

Is there any way to ensure dependancy isolation in nodejs projects?

Answer 1

I believe yarn.lock (for yarn) serves the purpose. All deps are written down there and you can store in source control