Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add package-lock.json to .gitignore #625

Closed
aashna27 opened this issue Jan 6, 2019 · 9 comments
Closed

Add package-lock.json to .gitignore #625

aashna27 opened this issue Jan 6, 2019 · 9 comments

Comments

@aashna27
Copy link

aashna27 commented Jan 6, 2019

Adding package-lock.json to .gitignore would prevent it's unnecessary commit .


Thank you!

@gitmate
Copy link

gitmate bot commented Jan 6, 2019

GitMate.io thinks the contributors most likely able to help are @ccpandhare, and @jywarren.

Possibly related issues are #409 (Fix installation setup by improving package.json.), #570 (Add Valid HTML Types To Module info.json Files), #277 (add sequencer.importString()), #369 (Add a Grayscale module), and #158 (Add a Saturation Module).

1 similar comment
@gitmate
Copy link

gitmate bot commented Jan 6, 2019

GitMate.io thinks the contributors most likely able to help are @ccpandhare, and @jywarren.

Possibly related issues are #409 (Fix installation setup by improving package.json.), #570 (Add Valid HTML Types To Module info.json Files), #277 (add sequencer.importString()), #369 (Add a Grayscale module), and #158 (Add a Saturation Module).

@gitmate gitmate bot added the enhancement label Jan 6, 2019
@vibhorgupta-gh
Copy link

I think we should actually commit the lock file since they lock the version being used by the project, for any new contributor to setup and not end up installing incompatible dependencies. Thoughts? @jywarren

@aashna27
Copy link
Author

aashna27 commented Jan 6, 2019

The dependency version is locked in package.json, and package-lock.json comes everytime npm install is done . And in case of conflicts in versions in package.json and package-lock.json the version of package.json is considered so I think ignoring package-lock while commiting is okay!! 😄

@vibhorgupta-gh
Copy link

@aashna27 https://stackoverflow.com/a/44210813 😅
The dependency version is actually locked in package-lock and not package.json. Also, the precedence being given to package.json in case of conflicts in versions is exactly why lock exists, to prevent such a thing from happening :D

Rest, admins may decide what seems fit

@harshkhandeparkar
Copy link
Member

harshkhandeparkar commented Jan 7, 2019

When a dependency is installed with npm i stall a lockfile is created and it is specifically stated that the lockfile should be commited. Lets just wait for the reviews' decision though. There may be another way around this.

@jywarren
Copy link
Member

jywarren commented Jan 7, 2019 via email

@aashna27
Copy link
Author

aashna27 commented Jan 7, 2019 via email

@tech4GT
Copy link
Member

tech4GT commented Jan 7, 2019

Oh we should leave the lock files in for sure.

@tech4GT tech4GT closed this as completed Jan 7, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

5 participants