Sure, I'm happy with locking the parts I need to lock. Why would I lock the part... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

deredede on Aug 6, 2025 | parent | context | favorite | on: We shouldn't have needed lockfiles

Sure, I'm happy with locking the parts I need to lock. Why would I lock the parts I don't need to lock?

skywhopper on Aug 7, 2025 [–]

Because you can’t know which ones you “need” to lock.

lenkite on Aug 8, 2025 | [–]

You can definitely know this. Use

    mvn dependency:tree -Dverbose

Or use maven-enforcer-plugin to fail the build on conflicts.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact