45b10ffd19
* Bump lodash from 4.17.15 to 4.17.19 (#52) Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.19. - [Release notes](https://github.com/lodash/lodash/releases) - [Commits](https://github.com/lodash/lodash/compare/4.17.15...4.17.19) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Amruta Kawade <65217380+AmrutaKawade@users.noreply.github.com> * Bump @actions/core from 1.1.3 to 1.2.6 (#60) Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 1.1.3 to 1.2.6. - [Release notes](https://github.com/actions/toolkit/releases) - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Amruta Kawade <65217380+AmrutaKawade@users.noreply.github.com> * updating node_nodules * updated package-lock Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
package-lock
(Re-)Build package-lock.json or npm-shrinkwrap.json file from node_modules folder
npm@5 Creating package-lock.json
Copying node_modules folders and trying to install additional packages leads to
a complete removal of all copied packages with npm@>=5.0.
A package.json file would solve this issue but nonetheless you would need to
create one with all it's dependencies.
Running package-lock on the folder which contains node_modules creates the
missing package-lock.json file and in case the package.json is missing, it
will be created as well. With this you are now save to install additional
packages with npm i ...
npm@4, npm@3 Creating npm-shrinkwrap.json
For npm@<=4.x you can also use this package to create a npm-shrinkwrap.json
file for fixing you dependencies. For me running npm shrink is mostly a mess
as there is always an extraneous dependency showing up (especially after a dedup).
- Make a fresh install with
rimraf node_modules npm-shrinkwrap.json npm i --production - Now create the
npm-shrinkwrap.jsonfile withpackage-lock -s
Installation
Requires nodejs.
$ npm install -g package-lock
Usage
$ package-lock
Usage: package-lock [options]
Options:
-p, --package force appending found packages to `optionalDependencies` in package.json
-r, --resolve <string> replace resolved repository
-s, --shrink write `npm-shrinkwrap.json` instead of `package-lock.json`
-h, --help output usage information
Tests
$ npm test
License
Unlicense http://unlicense.org