title: How to install packages based on the lock-file with Yarn?
body: <p>We use Yarn to install dependencies. The yarn-lock file is in the repo. If Compared to composer for php, I would expect that when I run <code>yarn install</code>, that the dependencies are installed based on the lock-file, and the lock file does not change.</p>
  
  <p>With <code>composer install</code> for php, you install always the same version for each package on any environment. I don't see why yarn does not work in a similar way.</p>
  
  <p>I think that with <code>yarn install</code> the lock gets updated too often and the file loses its point since it actually does not lock versions. Or am I using the wrong commands?</p>