Why use peer dependencies in npm for plugins?

by

TL;DR: peerDependencies are for dependencies that are exposed to (and expected to be used by) the consuming code, as opposed to “private” dependencies that are not exposed, and are only an implementation detail.

The problem peer dependencies solve

NPM’s module system is hierarchical. One big advantage for simpler scenarios is that when you install an npm package, that package brings its own dependencies with it so it will work out of the box.

But problems arise when:

  • Both your project and some module you are using depend on another module.
  • The three modules have to talk to each other.

In Example

Let’s say you are building YourCoolProject and you’re using both JacksModule 1.0 and JillsModule 2.0. And let’s suppose that JacksModule also depends on JillsModule, but on a different version, say 1.0. As long as those 2 versions don’t meet, there is no problem. The fact that JacksModule is using JillsModule below the surface is just an implementation detail. We are bundling JillsModule twice, but that’s a small price to pay when we get stable software out of the box.

But now what if JacksModule exposes its dependency on JillsModule in some way. It accepts an instance of JillsClass for example… What happens when we create a new JillsClass using version 2.0 of the library and pass it along to jacksFunction? All hell will break loose! Simple things like jillsObject instanceof JillsClass will suddenly return false because jillsObject is actually an instance of another JillsClass, the 2.0 version.

How peer dependencies solve this

They tell npm

I need this package, but I need the version that is part of the
project, not some version private to my module.

When npm sees that your package is being installed into a project that does not have that dependency, or that has an incompatible version of it, it will warn the user during the installation process.

When should you use peer dependencies?

  • When you are building a library to be used by other projects, and
  • This library is using some other library, and
  • You expect/need the user to work with that other library as well

Common scenarios are plugins for larger frameworks. Think of things like Gulp, Grunt, Babel, Mocha, etc. If you write a Gulp plugin, you want that plugin to work with the same Gulp that the user’s project is using, not with your own private version of Gulp.

More Related Contents:

  1. Find the version of an installed npm package
  2. What’s the difference between dependencies, devDependencies and peerDependencies in npm package.json file?
  3. How to completely remove node.js from Windows
  4. NPM Install Error:Unexpected end of JSON input while parsing near ‘…nt-webpack-plugin”:”0’
  5. Error: EACCES: permission denied, access ‘/usr/local/lib/node_modules’
  6. How to install a private NPM module without my own registry?
  7. How to install a previous exact version of a NPM package?
  8. Using npm behind corporate proxy .pac
  9. npm WARN package.json: No repository field
  10. How to npm install to a specified directory?
  11. can you host a private repository for your organization to use with npm?
  12. Angular2 QuickStart npm start is not working correctly
  13. NPM stuck giving the same error EISDIR: Illegal operation on a directory, read at error (native)
  14. Node Sass couldn’t find a binding for your current environment
  15. node 5.5.0 already installed but node -v fetches with “v4.2.1” on OS X & homebrew?
  16. npm ERR! code UNABLE_TO_GET_ISSUER_CERT_LOCALLY
  17. How do you prevent install of “devDependencies” NPM modules for Node.js (package.json)?
  18. How to consume npm modules from typescript?
  19. How to install npm -g on offline server
  20. npm install hangs
  21. Error “npm WARN package.json: No repository field”
  22. What is the difference between res.send and res.write in express?
  23. Jest gives `Cannot find module` when importing components with absolute paths
  24. Is there any way to fix package-lock.json lockfileVersion so npm uses a specific format?
  25. How/why does npm recommend not running as root?
  26. Cannot uninstall angular-cli
  27. Get version number from package.json in React Redux (create-react-app)
  28. How do I override nested dependencies with `yarn`?
  29. How to store a file with file extension with multer?
  30. Go to the TypeScript source file instead of the type definition file in VS Code

Leave a Comment