3 ms·
> and that `npm install` will not respect the package-lock.json I'm not sure where you get that from. Maybe this was the case for the first NPM version with pa
by hobofan 4y ago
> and that `npm install` will not respect the package-lock.json
I'm not sure where you get that from. Maybe this was the case for the first NPM version with package-lock.json, but at least for the current and previous LTS version, it is definitely being respected.
- rubenfiszel 4y agoThis is correct up to a point (which is why npm ci exist at all), I agree that in general since you would have to mutate the package.json for that to happen, my point is moot (https://stackoverflow.com/questions/45022048/why-does-npm-install-rewrite-package-lock-json https://stackoverflow.com/questions/45022048/why-does-npm-in...) but npm install will overwrite the package-lock.json if they do not match.