`npm install` 总是从 package.json 安装所有东西

Question

我正在尝试设置一些依赖于一些 Node 模块的 CI 测试，但不需要在 package.json 中安装所有内容。我想我可以这样做：

npm install --no-save eslint stylelint stylelint-config-standard stylelint-order stylelint-scss

但是，这样做仍然会安装我devDependencies在 package.json 中的所有内容。我如何告诉 NPM 忽略我的 package.json，而只安装我特别告诉它的内容？

---

编辑：为了更好地展示我node_modules遇到的问题，我删除了我的一个项目，并尝试运行npm install --no-save mkdirp. mkdirp 是一个非常简单的模块，只有一个依赖项，但是正如您从下面的输出中看到的那样，NPM 继续前进并仍然将所有内容安装在我的package.json.

jacob@RYZEN:~/Repositories/new-site$ npm install --no-save mkdirp

> puppeteer@1.8.0 install /mnt/c/Users/Jacob/Repositories/new-site/node_modules/puppeteer
> node install.js

Downloading Chromium r588429 - 103.7 Mb [====================] 100% 0.0s
Chromium downloaded to /mnt/c/Users/Jacob/Repositories/new-site/node_modules/puppeteer/.local-chromium/linux-588429

> node-sass@4.9.3 install /mnt/c/Users/Jacob/Repositories/new-site/node_modules/node-sass
> node scripts/install.js

Cached binary found at /home/jacob/.npm/node-sass/4.9.3/linux-x64-57_binding.node

> gifsicle@3.0.4 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/gifsicle
> node lib/install.js

  ? gifsicle pre-build test passed successfully

> jpegtran-bin@3.2.0 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/jpegtran-bin
> node lib/install.js

  ? jpegtran pre-build test passed successfully

> optipng-bin@3.1.4 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/optipng-bin
> node lib/install.js

  ? optipng pre-build test passed successfully

> pngquant-bin@3.1.1 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/pngquant-bin
> node lib/install.js

  ? pngquant pre-build test passed successfully

> node-sass@4.9.3 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/node-sass
> node scripts/build.js

Binary found at /mnt/c/Users/Jacob/Repositories/new-site/node_modules/node-sass/vendor/linux-x64-57/binding.node
Testing binary
Binary is fine

> swiper@4.3.5 postinstall /mnt/c/Users/Jacob/Repositories/new-site/node_modules/swiper
> node -e "console.log('\u001b[35m\u001b[1mLove Swiper? Support Vladimir\'s work by donating or pledging on patreon:\u001b[22m\u001b[39m\n > \u001b[32mhttps://patreon.com/vladimirkharlampidi\u001b[0m\n')"

Love Swiper? Support Vladimir's work by donating or pledging on patreon:
 > https://patreon.com/vladimirkharlampidi

npm WARN optional SKIPPING OPTIONAL DEPENDENCY: fsevents@1.2.4 (node_modules/fsevents):
npm WARN notsup SKIPPING OPTIONAL DEPENDENCY: Unsupported platform for fsevents@1.2.4: wanted {"os":"darwin","arch":"any"} (current: {"os":"linux","arch":"x64"})

+ mkdirp@0.5.1
added 1969 packages from 803 contributors and audited 24004 packages in 201.431s
found 21 vulnerabilities (4 low, 8 moderate, 9 high)
  run `npm audit fix` to fix them, or `npm audit` for details

Answer 1

我已经弄清楚为什么会发生这种情况；显然，如果你有一个package-lock.json，无论你通过什么标志，NPM 总是在那里安装所有东西。解决方案是--no-package-lock标志。

npm install --no-package-lock --no-save --quiet stylelint-config-standard stylelint-order stylelint-scss