npm ci lockfileVersion mismatch across npm releases
A team wants a single package-lock.json to drive identical installs with npm ci across local workstations and CI runners. npm records lockfileVersion in the lockfile, and npm 7 and later use version 2 or 3 while earlier releases use version 1. It is unclear whether npm ci rejects a lockfile written by a different major npm release, or whether it silently rew