`imba create ; pnpm i` installs imba 0.9.0
- Dominant language
- JavaScript
- Stars
- 6.5k
- Forks
- 183
- Avg merge
- 4h 10m
- Merged PRs (30d)
- 3
Description
### Description
As stated in the title. `pnpm i` installs imba 0.9.0.
`"imba": "*"` is too relaxed.
Same for `express`.
```
Packages: +135
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Packages are hard linked from the content-addressable store to the virtual store.
Content-addressable store is at: /tmp/.pnpm-store/v3
Virtual store is at: node_modules/.pnpm
dependencies:
+ express 0.14.0 (4.18.2 is available) deprecated
devDependencies:
+ imba 0.9.0 (2.0.0-alpha.231 is available)
Progress: resolved 139, reused 0, downloaded 138, added 135, done
Done in 3.1s
```
### Reproduction
```
git init
imba create #pick the "Express" template
# press ^C to skip "install dependencies"
pnpm i
```
### Workaround
Run `pnpm update`
### System Environment
_No response_
Contributor guide
Research direction
Start with the `imba create` implementation for the Express template and inspect the generated dependency manifest. Reproduce the issue by skipping installation and running `pnpm i`, then verify that the generated project resolves supported versions of imba and express rather than the obsolete versions shown in the report.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100