Now, some folks don’t see the value in precise reproducibility. “Manifests are good enough!”, “It doesn’t matter until the project gets serious” and “npm became popular long before shrinkwrap (npm’s lock file) was around!” are some arguments I’ve seen.
So you want to write a package manager
sam boyer
18128
Harm reduction is, recall, a concept from public health. So, for an interesting slant on this whole problem, substitute “software development” with “sex” and “lock files/reproducible builds” with “contraception.”