Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Suggestion: Remove package-lock.json from .gitignore files #615

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Commits on Apr 27, 2022

  1. Remove package-lock.json from .gitignore files

    The package-lock.json file is intended to be checked in to source
    control in order to make builds reproducible; without
    a package-lock.json file `npm install` becomes non-deterministic.
    
    See e.g.
    https://docs.npmjs.com/cli/v8/configuring-npm/package-lock-json:
    
    > package-lock.json is automatically generated for any operations where
    > npm modifies either the node_modules tree, or package.json. It describes
    > the exact tree that was generated, such that subsequent installs are
    > able to generate identical trees, regardless of intermediate dependency
    > updates.
    >
    > This file is intended to be committed into source repositories, and
    > serves various purposes:
    chreke committed Apr 27, 2022
    Configuration menu
    Copy the full SHA
    433ff1c View commit details
    Browse the repository at this point in the history