Questions tagged [package-lock.json]

224 questions
1
vote
2 answers

Why package-lock.json is created if npm already have the npm-shrinkwrap.json for locking purpose?

npm-shrinkwrap.json: Lock down the node_modules tree as well as dependencies and nested dependencies to prevent the package code breaking on other machines. package-lock.json: Lock down the node_modules tree as well as dependencies and nested…
user10220492
1
vote
1 answer

How to override package.json "latest" dist-tag with version from package-lock.json?

I want to use latest distribution tag in my package.json for internal packages. This allows me to always get their latest versions when I npm install in local environment, without updating all external 3rd parties. The issue comes when I'm hotfixing…
Maxim Kulikov
  • 699
  • 7
  • 15
1
vote
1 answer

johnny-five library is not getting detected by npm

I tried installing Johnny-five library as specified in the website. After installation while running the code i am getting error as below, please help. While installing Johnny-five package I got a message such as package-lock.json need to be…
Lakshmi
  • 66
  • 4
1
vote
2 answers

Ensure package-lock.json keeps specific versions for dependencies' requirements

Some updates to a dependency of one of our dependencies broke our build and was a bit tricky to find out what the cause of the issue was... We finally noticed that @vue/component-compiler-utils requires "prettier": "^1.11.1" and - as discussed in…
Andrea Epifani
  • 111
  • 1
  • 8
1
vote
0 answers

Installing Gulp created large node_modules and package-lock files

I have just installed Gulp in a fresh, empty project and followed the instructions in the getting started guide. I'm not sure if I've done it right or not though as after running npm init and npm install --save-dev gulp I had a very large…
mrseanbaines
  • 823
  • 2
  • 12
  • 25
1
vote
1 answer

Update intermediary npm dependencies with package-lock.json

What is the proper way to update an intermediary dependency with npm in the presence of the package-lock.json file? For example: $ npm outdated --depth=1 eslint Package Current Wanted Latest Location eslint 4.9.0 4.10.0 4.10.0 …
rink.attendant.6
  • 44,500
  • 61
  • 101
  • 156
1
vote
2 answers

How check consistency npm-shrinkwrap.json and package.json

Sometimes my team members forgot to update npm-shrinkwrap.json after update package.json. I know this package from uber, but it can not be used with npm v3. So now it is not solution. Do have I possibility to auto check consistency for…
galkin
  • 5,264
  • 3
  • 34
  • 51
0
votes
0 answers

Dependabot is not completely updating package-lock.json

I'm using dependabot to update npm packages in a project. Dependabot seems to be working okay. However I've noticed that regenerating my package-lock.json file every few weeks produces many package updates. By "regenerate", I mean deleting…
Johnny Metz
  • 5,977
  • 18
  • 82
  • 146
0
votes
1 answer

Generate many package-lock.json file with backup postfix

I have noticed that npm creates numerous package-lock*.json files in the root directory of my project. I am not sure why so many files are created or what they are used for. The generated files are depicted in the image. Can anyone help me with this…
Maulik Kakadiya
  • 1,467
  • 1
  • 21
  • 31
0
votes
0 answers

Update jsrsasign from 0.0.3 to 10.8.6

I need assistance in he procedure to update jsrsasign npm library under jws-jwk tree. It's currently giving me the following tree when using npm ls jsrsasign. jws-jwk@0.1.4 └── jsrsasign@0.0.3 I tried npm install jsrsasign@10.8.6 but its adding…
0
votes
0 answers

Is there any way to set field resolved in package-lock.json to empty

In npm package-lock.json, I found the field of "resolved". Is there any way to set it to empty. I created local npm repository for stg and prd env respectively, before building step, can I execute the command like below to determine which repository…
0
votes
0 answers

thousands of lines in package-lock.json

I have 32 thousands of lines in my package-lock.json while in package.json I have only 31 dependencies. Is it normal to have so many lines in package-lock.json? I tried deleting node modules and package-lock.json but whenever I run npm i it installs…
Luk1e
  • 1
  • 2
0
votes
0 answers

Package-lock.json does not lock with caret in package.json. (I promise this is not a dupe.)

Please don't mark this as a dupe. I've done a lot of research on this and I'm very confused about something specific here. I keep seeing everywhere (on stackoverflow and in lots of articles) that if you use a caret (^) in your package.json file,…
Brad
  • 722
  • 2
  • 8
  • 24
0
votes
1 answer

Dockerfile `RUN --mount=type=ssh` does'nt work with ssh repository dependancies inside package.json / package-lock.json

I tried to build a nodejs application with ssh external dependancies with and without package-lock.json in a Dockerfile. It seems that --mount=type=ssh doesn't works recursively when cloning external ssh dependancies with npm package-lock.json…
0
votes
1 answer

Showing White blank screen after deployed in github (React)

Error : Failed to load resource: the server responded with a status of 404 () Package-lock.json : "name": "tic_tac_toe", "version": "0.1.0", "homepage": "https://richardshaju.github.io/tictactoe", "lockfileVersion": 3, "requires":…