`npm install`, how to track warning packages?

Question

Is there any easy way in npm keep track of which packets these dependency warnings came from? Packages in alerts are probably not upper levels.

I'm on npm v3.6.0 (node ​​5.6.0) now.

Answer 1

Running npm list in the project directory will give you a dependency tree, and a simple text search for outdated packages will indicate where they came from.

As a workaround to obsolescence issues, you can use npm-shrinkwrap ( usage example ).