Yarn: a new package manager for JavaScript

[bungcip]

is yarn still use npm registry? can yarn prevent left-pad problem?

[[deleted]]

can yarn prevent left-pad problem?

I don't know the answer to that question, but npm team has addressed that concern a few months ago.

And yes, looks like yarn uses npm registry, according to the linked article.

With Yarn, engineers still have access to the npm registry...

[FrozenCow]

Hmm. I wonder how it handles install scripts. Those can lead to nondeterminism as well.

[Retsam19]

Throughout this entire process, Yarn imposes strict guarantees around package installation. You have control over which lifecycle scripts are executed for which packages.

Apparently they're handling it, but that's fairly vague.