forked from 0xWheatyz/SPARC
Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #1364
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap item: P2 Frontend - Missing lockfile
The frontend has no lockfile committed. This means
npm installorpnpm installcan install different dependency versions across machines and CI runs, leading to non-reproducible builds.What to do
package-lock.json(npm) orpnpm-lock.yaml(pnpm) to the repository.Dockerfile(if any) to usenpm ciorpnpm install --frozen-lockfileinstead of a bareinstall.Acceptance criteria
package.json.node_modulesas the original.[Repo Manager] This issue has already been resolved on the main branch. Verified by code inspection during triage. Closing.