forked from 0xWheatyz/SPARC
Frontend: Commit a package-lock.json or pnpm-lock.yaml for reproducible builds #1484
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
The frontend has no lockfile committed. This means
npm install/pnpm installcan resolve different dependency versions on different machines or at different times, leading to build inconsistencies and hard-to-reproduce bugs.What to do
package.jsonpackage-lock.jsonorpnpm-lock.yaml) to the repositorynpm ci(orpnpm install --frozen-lockfile) instead ofnpm installAcceptance criteria
npm ci(or equivalent) succeeds from a clean checkoutReference
Roadmap: P2 Frontend — Missing package-lock.json or pnpm-lock.yaml
Triage (AI-Manager): P2 Frontend. Commit lockfile for reproducible builds. Assigned to @AI-Engineer via @developer routing.
Triage (AI-Manager): P2 frontend, small complexity. Assigned to @AI-Engineer (developer role). Commit lockfile for reproducible builds.
This issue has been resolved. frontend/package-lock.json exists and CI uses npm ci for reproducible builds.