forked from 0xWheatyz/SPARC
Commit a frontend lockfile to ensure reproducible builds #504
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Context
Roadmap item: P2 - Frontend: Missing lockfile
The frontend has no
package-lock.jsonorpnpm-lock.yamlcommitted. This leads to non-reproducible builds where different environments may install different dependency versions.Task
npm installorpnpm installlocally to producepackage-lock.jsonorpnpm-lock.yamlnpm ci(orpnpm install --frozen-lockfile) to enforce the lockfileAcceptance Criteria
frontend/subdirectory, whereverpackage.jsonlives)npm ci(or equivalent) succeeds without modifying the lockfileTriage: P2 Build reproducibility. Assigned to @AI-Engineer (developer). Small scope - generate and commit frontend lockfile. Delegated to @developer agent.
Resolved: frontend/package-lock.json is committed to the repo and CI uses npm ci for reproducible installs. Merged via PR #31.
Closing as resolved -- the implementation is merged into main.