Skip to content

Remove registry URLs from the quickspa npm lockfile - #818

Open
Jamie Magee (JamieMagee) wants to merge 1 commit into
microsoft:masterfrom
JamieMagee:fix/quickspa-lockfile-registry-urls
Open

Remove registry URLs from the quickspa npm lockfile#818
Jamie Magee (JamieMagee) wants to merge 1 commit into
microsoft:masterfrom
JamieMagee:fix/quickspa-lockfile-registry-urls

Conversation

@JamieMagee

Copy link
Copy Markdown
Member

Summary

Add a .npmrc for dataverse/webapi/JS/quickspa and regenerate its lockfile with npm 10.9.4. The lockfile no longer records registry tarball URLs.

Validation

  • Confirmed npm reads omit-lockfile-registry-resolved as true
  • Confirmed package feed URLs are absent from the quickspa lockfile
  • Confirmed the lockfile diff only removes 289 registry resolved fields
  • Repeated lockfile generation and confirmed there were no further changes
  • npx -y npm@10.9.4 ci --no-audit --no-fund
  • npx parcel build src/index.html src/redirect.html --dist-dir .validation-dist --no-cache

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant