installDeps.sh: create a package-lock.json on startup. Track it in the repo.

Browse source

This change reverts c4918efc1b, and basically negates what was done for #3396,
but aligns better with current practices in the nodejs ecosystem.

Pragmatically speaking, this will allow users, if they want, to use
npm-force-resolutions (https://github.com/rogeriochaves/npm-force-resolutions)
to manually fix security vulnerabilities.
We had a problem for that (see #3598), and - given the fragmented nature of
the nodejs ecosystem - it is reasonable to expect more issues like that one,
so it's better to be prepared.

Closes #3659.

...

This commit is contained in:

muxator 2019-10-31 19:20:28 +01:00

parent 84479851fe

commit 9ee131ca1f

2 changed files with 7240 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

7239

src/package-lock.json generated Normal file

View file

File diff suppressed because it is too large Load diff