What is package-lock.json?
package-lock.json records the resolved dependency tree and exact package versions installed for a project. It helps ensure reproducible installations across machines and environments. It can contain information about transitive dependencies, package versions, integrity information, and resolved package locations.
Key Takeaways
- package.json declares dependencies.
- package-lock.json records resolved dependency versions.
- Lock files improve reproducibility.
Knowledge Check
What is the primary purpose of package-lock.json?