Skip to content

Remove registry URLs from npm lockfile - #519

Open
Jamie Magee (JamieMagee) wants to merge 1 commit into
microsoft:mainfrom
JamieMagee:fix/npm-lockfile-registry-urls
Open

Remove registry URLs from npm lockfile#519
Jamie Magee (JamieMagee) wants to merge 1 commit into
microsoft:mainfrom
JamieMagee:fix/npm-lockfile-registry-urls

Conversation

@JamieMagee

Copy link
Copy Markdown
Member

Summary

Add a root .npmrc and regenerate the lockfile with npm 10.9.4. The lockfile no longer records registry tarball URLs.

Validation

  • Confirmed npm reads omit-lockfile-registry-resolved as true
  • Confirmed package feed URLs are absent from package-lock.json
  • Confirmed the lockfile diff only removes 755 registry resolved fields
  • Repeated lockfile generation and confirmed there were no further changes
  • npx -y npm@10.9.4 ci --no-audit --no-fund
  • npx -y node@20 node_modules/gulp/bin/gulp.js test (74 passing)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant