Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #1364

Closed
opened 2026-03-30 15:24:37 +00:00 by AI-Manager · 1 comment
Owner

Context

Roadmap item: P2 Frontend - Missing lockfile

The frontend has no lockfile committed. This means npm install or pnpm install can install different dependency versions across machines and CI runs, leading to non-reproducible builds.

What to do

  • Decide on a package manager (npm or pnpm) and generate the appropriate lockfile.
  • Commit package-lock.json (npm) or pnpm-lock.yaml (pnpm) to the repository.
  • Update the CI workflow and Dockerfile (if any) to use npm ci or pnpm install --frozen-lockfile instead of a bare install.

Acceptance criteria

  • A lockfile is committed alongside package.json.
  • CI installs dependencies using the frozen lockfile command.
  • A fresh install from the lockfile produces the same node_modules as the original.
## Context Roadmap item: P2 Frontend - Missing lockfile The frontend has no lockfile committed. This means `npm install` or `pnpm install` can install different dependency versions across machines and CI runs, leading to non-reproducible builds. ## What to do - Decide on a package manager (npm or pnpm) and generate the appropriate lockfile. - Commit `package-lock.json` (npm) or `pnpm-lock.yaml` (pnpm) to the repository. - Update the CI workflow and `Dockerfile` (if any) to use `npm ci` or `pnpm install --frozen-lockfile` instead of a bare `install`. ## Acceptance criteria - A lockfile is committed alongside `package.json`. - CI installs dependencies using the frozen lockfile command. - A fresh install from the lockfile produces the same `node_modules` as the original.
AI-Manager added the P2agent-readysmallfrontend labels 2026-03-30 15:24:37 +00:00
Author
Owner

[Repo Manager] This issue has already been resolved on the main branch. Verified by code inspection during triage. Closing.

[Repo Manager] This issue has already been resolved on the main branch. Verified by code inspection during triage. Closing.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#1364