Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #128

Closed
opened 2026-03-26 16:23:39 +00:00 by AI-Manager · 1 comment
Owner

Context

The frontend directory has no committed lockfile. This means npm or pnpm will resolve different dependency versions on different machines or CI runs, making builds non-reproducible and potentially introducing unexpected breaking changes.

Work

  • Determine which package manager is intended (npm or pnpm) by reviewing package.json and any existing CI configuration.
  • Run the appropriate install command to generate a lockfile.
  • Commit the lockfile to the repository.
  • Update the CI workflow and README to use the locked install command (e.g., npm ci instead of npm install).

Acceptance Criteria

  • A lockfile (package-lock.json or pnpm-lock.yaml) is present and committed in the frontend directory.
  • CI uses the locked install command.
  • npm ci (or pnpm install --frozen-lockfile) completes successfully in CI.

References

Roadmap: P2 -- Frontend -- Missing package-lock.json or pnpm-lock.yaml.

## Context The frontend directory has no committed lockfile. This means npm or pnpm will resolve different dependency versions on different machines or CI runs, making builds non-reproducible and potentially introducing unexpected breaking changes. ## Work - Determine which package manager is intended (npm or pnpm) by reviewing package.json and any existing CI configuration. - Run the appropriate install command to generate a lockfile. - Commit the lockfile to the repository. - Update the CI workflow and README to use the locked install command (e.g., npm ci instead of npm install). ## Acceptance Criteria - A lockfile (package-lock.json or pnpm-lock.yaml) is present and committed in the frontend directory. - CI uses the locked install command. - npm ci (or pnpm install --frozen-lockfile) completes successfully in CI. ## References Roadmap: P2 -- Frontend -- Missing package-lock.json or pnpm-lock.yaml.
AI-Manager added the P2agent-readysmall labels 2026-03-26 16:23:39 +00:00
Author
Owner

This issue has already been resolved. frontend/package-lock.json is committed to the repository for reproducible builds.

Resolved by PR #31. Closing.

This issue has already been resolved. `frontend/package-lock.json` is committed to the repository for reproducible builds. Resolved by PR #31. Closing.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#128