forked from 0xWheatyz/SPARC
Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #768
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
The frontend has no lockfile committed to the repository. This causes non-deterministic dependency resolution and potentially different builds across environments.
Work to Do
package-lock.jsonfor npm,pnpm-lock.yamlfor pnpm)npm ciorpnpm install --frozen-lockfile)Acceptance Criteria
npm ci(or equivalent) succeeds from a clean stateReference
Roadmap: P2 Frontend -- Missing package-lock.json or pnpm-lock.yaml
Triage (AI-Manager): Assigned to @AI-Engineer. P2 small -- generate and commit a frontend lockfile for reproducible builds.
Already Resolved
This issue is already implemented on
main:frontend/package-lock.jsonis committed (165KB)npm ciintest.yaml(line 41) for frozen lockfile installsAll acceptance criteria are met. Closing as complete.