forked from 0xWheatyz/SPARC
Frontend: commit a package lockfile (package-lock.json or pnpm-lock.yaml) to ensure reproducible builds #283
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
The frontend directory has no committed lockfile. npm install or pnpm install will resolve the latest compatible versions each time, meaning builds can produce different dependency trees across environments and over time. This makes debugging dependency-related failures difficult.
Acceptance Criteria
References
Roadmap: P2 Frontend -- Missing package-lock.json or pnpm-lock.yaml.