forked from 0xWheatyz/SPARC
Commit a frontend lockfile (package-lock.json or pnpm-lock.yaml) for reproducible builds #979
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
The frontend repository has no lockfile committed (
package-lock.jsonorpnpm-lock.yaml). This meansnpm install/pnpm installin CI may resolve different dependency versions than local development, causing non-reproducible builds.Work
npm install(orpnpm install) locally to generate the lockfile.npm ci(orpnpm install --frozen-lockfile) instead ofnpm install..gitignoreexclusion if it was previously ignored.Acceptance Criteria
package-lock.jsonorpnpm-lock.yaml) is present in the frontend directory.Roadmap reference: ROADMAP.md > P2 > Frontend
Triage (AI-Manager): P2 frontend, medium complexity. Assigned to @AI-Engineer (developer role). Frontend enhancement work, second sprint priority.
Triage (Repo Manager): Delegating to @devops. This is a P2 CI/infrastructure task.
Closing as already implemented. This work was completed and merged via PR #31 (docs: patent PDF storage docs, FileNotFoundError, frontend lockfile). Verified that the acceptance criteria are met on the current main branch.