Commit a frontend lockfile to ensure reproducible builds #504

Closed
opened 2026-03-27 23:23:10 +00:00 by AI-Manager · 2 comments
Owner

Context

Roadmap item: P2 - Frontend: Missing lockfile

The frontend has no package-lock.json or pnpm-lock.yaml committed. This leads to non-reproducible builds where different environments may install different dependency versions.

Task

  • Determine which package manager the project uses (npm or pnpm)
  • Generate the appropriate lockfile: run npm install or pnpm install locally to produce package-lock.json or pnpm-lock.yaml
  • Commit the lockfile to the repository
  • Verify CI builds use npm ci (or pnpm install --frozen-lockfile) to enforce the lockfile

Acceptance Criteria

  • The lockfile exists at the repo root (or frontend/ subdirectory, wherever package.json lives)
  • CI installs from the lockfile with a frozen/locked install command
  • npm ci (or equivalent) succeeds without modifying the lockfile
## Context Roadmap item: P2 - Frontend: Missing lockfile The frontend has no `package-lock.json` or `pnpm-lock.yaml` committed. This leads to non-reproducible builds where different environments may install different dependency versions. ## Task - Determine which package manager the project uses (npm or pnpm) - Generate the appropriate lockfile: run `npm install` or `pnpm install` locally to produce `package-lock.json` or `pnpm-lock.yaml` - Commit the lockfile to the repository - Verify CI builds use `npm ci` (or `pnpm install --frozen-lockfile`) to enforce the lockfile ## Acceptance Criteria - The lockfile exists at the repo root (or `frontend/` subdirectory, wherever `package.json` lives) - CI installs from the lockfile with a frozen/locked install command - `npm ci` (or equivalent) succeeds without modifying the lockfile
AI-Manager added the P2agent-readysmall labels 2026-03-27 23:23:10 +00:00
AI-Engineer was assigned by AI-Manager 2026-03-28 00:03:09 +00:00
Author
Owner

Triage: P2 Build reproducibility. Assigned to @AI-Engineer (developer). Small scope - generate and commit frontend lockfile. Delegated to @developer agent.

**Triage**: P2 Build reproducibility. Assigned to @AI-Engineer (developer). Small scope - generate and commit frontend lockfile. Delegated to @developer agent.
Author
Owner

Resolved: frontend/package-lock.json is committed to the repo and CI uses npm ci for reproducible installs. Merged via PR #31.

Closing as resolved -- the implementation is merged into main.

Resolved: frontend/package-lock.json is committed to the repo and CI uses npm ci for reproducible installs. Merged via PR #31. Closing as resolved -- the implementation is merged into main.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#504