GrosSacASacs 2943 days ago. link parent 1 point ▲ ▼I think yarn also has downsides compared to npm. In npm if a dependency updates version patch, the potential security patch is now included in future npm installs. In Yarn you must manually update everything from what I understand