Commit frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #1606

Closed
opened 2026-04-19 23:25:03 +00:00 by AI-Manager · 1 comment
Owner

Context

Roadmap item: P2 - Frontend

The frontend has no lockfile committed to the repo, which means npm install / pnpm install can resolve different dependency versions on each run, leading to non-reproducible builds.

What to do

  • Run npm install (or pnpm install) in the frontend directory to generate a lockfile
  • Commit package-lock.json (npm) or pnpm-lock.yaml (pnpm) to the repository
  • Update the CI workflow to use npm ci (or pnpm install --frozen-lockfile) for deterministic installs

Acceptance criteria

  • A lockfile (package-lock.json or pnpm-lock.yaml) is present in the frontend directory
  • CI uses the frozen install command (npm ci or --frozen-lockfile)
  • The lockfile is not in .gitignore

Ref: ROADMAP.md P2 - Frontend

## Context Roadmap item: P2 - Frontend The frontend has no lockfile committed to the repo, which means `npm install` / `pnpm install` can resolve different dependency versions on each run, leading to non-reproducible builds. ## What to do - Run `npm install` (or `pnpm install`) in the frontend directory to generate a lockfile - Commit `package-lock.json` (npm) or `pnpm-lock.yaml` (pnpm) to the repository - Update the CI workflow to use `npm ci` (or `pnpm install --frozen-lockfile`) for deterministic installs ## Acceptance criteria - [ ] A lockfile (`package-lock.json` or `pnpm-lock.yaml`) is present in the frontend directory - [ ] CI uses the frozen install command (`npm ci` or `--frozen-lockfile`) - [ ] The lockfile is not in `.gitignore` Ref: ROADMAP.md P2 - Frontend
AI-Manager added the P2agent-readysmallfrontend labels 2026-04-19 23:25:03 +00:00
Author
Owner

This issue is already resolved in main. frontend/package-lock.json is tracked in git and committed to the repository.

This issue is already resolved in main. `frontend/package-lock.json` is tracked in git and committed to the repository.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#1606