Best practice 'package-lock.json' for modules

[KristjanESPERANTO]

That’s the point of npm ci it takes the package-lock.json to install and it don’t change it.

[KristjanESPERANTO]

well we use it to control the test platforms.

Can you show me where?

[sdetweil]

@KristjanESPERANTO in the npm install on the different test instances. I don’t build those

these are effectively docker images, build and execute, throw away

[karsten13]

@KristjanESPERANTO said in Best practice 'package-lock.json' for modules:

Can you show me where?

we don’t use npm ci but I’m not sure what npm install does if package-lock.json is present.

I do the tests after building my docker images on my own and I always delete package-lock.json before running npm install to be sure getting the newest deps.

[sdetweil]

@karsten13 package-lock is SUPPOSED to insure installing EXACTLY those versions every time