caret range
A dependency version specification in npm semantic versioning (SemVer), using the ^ prefix to indicate that the latest minor and patch versions under the specified major version may be installed, without automatically upgrading the major version.
Timeline (last 90 days)
At the 0.x stage, the actual protection offered by caret ranges (such as ^0.2.0) is limited; a safer approach is to pin exact version numbers and read the commit diff before upgrading.
Under npm's caret range (such as ^2.0.0), running npm install or yarn will pull the latest patch version that falls within that range, but will not automatically upgrade to major version 3.0.0 or above.
All Facts (2)
At the 0.x stage, the actual protection offered by caret ranges (such as ^0.2.0) is limited; a safer approach is to pin exact version numbers and read the commit diff before upgrading.
50%UnverifiedUnder npm's caret range (such as ^2.0.0), running npm install or yarn will pull the latest patch version that falls within that range, but will not automatically upgrade to major version 3.0.0 or above.
50%