@kirrus yarn 2 and beyond include some pretty drastic api changes. --pure-lockfile in v1 ignored lockfile generation entirely, so i bet you could get away with just `yarn install` or `npm install --no-package-lock`