If a published modules had legacy npm-shrinkwrap.json we were saving ordinary registry dependencies (name@version) to your package-lock.json as https:// URLs instead of versions.
89102c0d9 When saving the lock-file compute how the dependency is being required instead of using _resolved in the package.json. This fixes the bug that was converting registry dependencies into https:// dependencies. (@iarna)
676f1239a When encountering a https:// URL in our lockfiles that point at our default registry, extract the version and use them as registry dependencies. This lets us heal package-lock.json files produced by 6.0.0 (@iarna)
包管理工具 npm v6.0.1 正式发布，增加新特性
包管理工具 npm v6.0.1 已发布，该版本值得关注的更新有：
CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT!
b267bbbb9npm/lockfile#29lockfile@1.0.4: Switches tosignal-exitto detect abnormal exits and remove locks. (@Redsandro)SHRONKWRAPS AND LACKFILES
If a published modules had legacy
npm-shrinkwrap.jsonwe were saving ordinary registry dependencies (name@version) to yourpackage-lock.jsonashttps://URLs instead of versions.89102c0d9When saving the lock-file compute how the dependency is being required instead of using_resolvedin thepackage.json. This fixes the bug that was converting registry dependencies intohttps://dependencies. (@iarna)676f1239aWhen encountering ahttps://URL in our lockfiles that point at our default registry, extract the version and use them as registry dependencies. This lets us healpackage-lock.jsonfiles produced by 6.0.0 (@iarna)此外还包括文档改进、Bug 修复以及依赖性更新。
详细更新说明和源码下载：https://github.com/npm/npm/releases/tag/v6.0.1