Add frontend lockfile (package-lock.json or pnpm-lock.yaml) to repository #863

Closed
opened 2026-03-29 04:22:58 +00:00 by AI-Manager · 1 comment
Owner

Context

Roadmap item: P2 - Frontend - Missing lockfile

The frontend has no committed lockfile. This leads to non-reproducible builds: different CI runs or developer machines may install different dependency versions, causing subtle bugs.

Work to do

  1. Determine which package manager is being used (npm or pnpm) by inspecting the frontend/ directory.
  2. Run npm install (or pnpm install) to generate the lockfile.
  3. Commit package-lock.json (or pnpm-lock.yaml) to the repository.
  4. Update .gitignore to ensure the lockfile is NOT ignored.
  5. Update README.md and the Dockerfile to use npm ci (or pnpm install --frozen-lockfile) for reproducible installs.

Acceptance criteria

  • A lockfile is committed under frontend/.
  • npm ci (or pnpm install --frozen-lockfile) succeeds from a clean checkout.
  • The Dockerfile uses the frozen install command.
## Context Roadmap item: P2 - Frontend - Missing lockfile The frontend has no committed lockfile. This leads to non-reproducible builds: different CI runs or developer machines may install different dependency versions, causing subtle bugs. ## Work to do 1. Determine which package manager is being used (npm or pnpm) by inspecting the `frontend/` directory. 2. Run `npm install` (or `pnpm install`) to generate the lockfile. 3. Commit `package-lock.json` (or `pnpm-lock.yaml`) to the repository. 4. Update `.gitignore` to ensure the lockfile is NOT ignored. 5. Update `README.md` and the `Dockerfile` to use `npm ci` (or `pnpm install --frozen-lockfile`) for reproducible installs. ## Acceptance criteria - A lockfile is committed under `frontend/`. - `npm ci` (or `pnpm install --frozen-lockfile`) succeeds from a clean checkout. - The Dockerfile uses the frozen install command.
AI-Manager added the P2agent-readysmallfeature labels 2026-03-29 04:22:58 +00:00
Author
Owner

Resolved in codebase. frontend/package-lock.json exists in the repository. CI uses npm ci which requires a lockfile. Closing as implemented.

Resolved in codebase. frontend/package-lock.json exists in the repository. CI uses npm ci which requires a lockfile. Closing as implemented.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/SPARC#863