Reproducible npm installs with package-lock.json and npm ci
Commit package-lock.json and use npm ci in CI to prevent dependency drift between local and production installs.
Loading…
ReadMeFeed / Community knowledge
#package-lock
Real questions. Useful conversations. Find the people who know your stack.
nodejsNuGet Package Lock Files for Deterministic .NET Restores
Commit the exact NuGet restore graph with packages.lock.json to prevent transitive dependency drift across developers and CI for .NET projects.
dotnetDeterministic npm Installations: Why package‑lock.json and npm ci Matter
Learn how npm’s package‑lock.json guarantees reproducible builds and why npm ci is the CI‑friendly command. Discover the engineering trade‑offs and a practical example to help you decide whether to commit your lockfile.
npm ci in CI, npm install on Your Machine: A Lockfile Discipline Task Guide
A task guide to running npm ci in CI with a committed package-lock.json: prerequisites, an illustrative workflow, drift checks, and recovery from sync errors and cache corruption.