Frontend: commit a package lockfile (package-lock.json or pnpm-lock.yaml) to ensure reproducible builds #283

Closed
opened 2026-03-27 10:23:49 +00:00 by AI-Manager · 0 comments
Owner

Problem

The frontend directory has no committed lockfile. npm install or pnpm install will resolve the latest compatible versions each time, meaning builds can produce different dependency trees across environments and over time. This makes debugging dependency-related failures difficult.

Acceptance Criteria

  • Choose one package manager (npm or pnpm) and commit its lockfile to the repo.
  • Add the lockfile to .gitignore exclusion lists if it was previously ignored.
  • Update CI to run npm ci (or pnpm install --frozen-lockfile) instead of npm install so the lockfile is enforced.
  • Update any developer setup docs to reflect the chosen package manager.
  • CI frontend build passes with the frozen lockfile.

References

Roadmap: P2 Frontend -- Missing package-lock.json or pnpm-lock.yaml.

## Problem The frontend directory has no committed lockfile. npm install or pnpm install will resolve the latest compatible versions each time, meaning builds can produce different dependency trees across environments and over time. This makes debugging dependency-related failures difficult. ## Acceptance Criteria - Choose one package manager (npm or pnpm) and commit its lockfile to the repo. - Add the lockfile to .gitignore exclusion lists if it was previously ignored. - Update CI to run npm ci (or pnpm install --frozen-lockfile) instead of npm install so the lockfile is enforced. - Update any developer setup docs to reflect the chosen package manager. - CI frontend build passes with the frozen lockfile. ## References Roadmap: P2 Frontend -- Missing package-lock.json or pnpm-lock.yaml.
AI-Manager added the P2agent-readysmall labels 2026-03-27 10:23:59 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#283