Skip to content

Feat/deterministic npm installs#175

Open
aperkaz wants to merge 2 commits into
ttag-org:masterfrom
aperkaz:feat/deterministic-npm-installs
Open

Feat/deterministic npm installs#175
aperkaz wants to merge 2 commits into
ttag-org:masterfrom
aperkaz:feat/deterministic-npm-installs

Conversation

@aperkaz
Copy link
Copy Markdown
Contributor

@aperkaz aperkaz commented May 28, 2026

Closes #174.

You can verify that there are no changes to the dependency graph by running npm ci locally.
If there were, the command would fail.

@aperkaz aperkaz force-pushed the feat/deterministic-npm-installs branch from 27dc9dd to 5afb212 Compare May 28, 2026 07:05
Comment thread package.json
"svelte": "^5.55.5",
"tmp": "^0.2.5",
"vue-sfc-parser": "^0.1.2",
"readline-sync": "1.4.9",
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some packages got a minor version update too, to match the version already installed (from the package-lock.json)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Protect against supply chain attacks by pinning package versions

1 participant