Skip to content

chore: restore npm lockfile integrity metadata#6924

Open
iamanaws wants to merge 1 commit into
snyk:mainfrom
iamanaws:chore/lockfile-metadata
Open

chore: restore npm lockfile integrity metadata#6924
iamanaws wants to merge 1 commit into
snyk:mainfrom
iamanaws:chore/lockfile-metadata

Conversation

@iamanaws

Copy link
Copy Markdown

Pull Request Submission Checklist

  • Follows CONTRIBUTING guidelines
  • Commit messages
    are release-note ready, emphasizing
    what was changed, not how.
  • Includes detailed description of changes
  • Contains risk assessment (Low | Medium | High)
  • Highlights breaking API changes (if applicable)
  • Links to automated tests covering new functionality
  • Includes manual testing instructions (if necessary)
  • Updates relevant GitBook documentation (PR link: ___)
  • Includes product update to be announced in the next stable release notes

What does this PR do?

Restores missing resolved and integrity metadata in package-lock.json.

The lockfile was updated with npm-lockfile-fix to work around an npm issue where npm install can remove registry metadata from lockfile entries: npm/cli#6301

This improves reproducibility for package managers and downstream consumers that rely on complete lockfile metadata.

Where should the reviewer start?

Review package-lock.json. This PR is lockfile-only.

How should this be manually tested?

Run:

npm ci

@iamanaws iamanaws requested a review from a team as a code owner June 20, 2026 19:23
@CLAassistant

CLAassistant commented Jun 20, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@snyk-io

snyk-io Bot commented Jun 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants