We use npm (not yarn) and we want to make sure our netlify builds install the versions of packages in our package-lock.json file. Your docs here say that you run npm install to install dependencies at build time, but npm install will overwrite the package-lock.json file. I read in another forum tha…

For anyone else hitting this issue, and wanting to be sure that a full npm installation is performed, here’s a custom plugin that you can add to your pipeline ( Create Build Plugins | Netlify Docs ) that seems to do the trick: const exec = require("child_process").exec; module.exports = { onPreBui…

How to enforce package-lock.json

Support

hrishikesh June 22, 2021, 3:14am 2

The SHA errors do occur in Netlify builds…

Topic		Replies	Views
How can I use npm ci instead of npm install? Support building	12	5910	September 27, 2023
Modify package.json before npm install is run Support building	18	3653	April 18, 2024
How node modules re installed for next deployment Support building , caching	1	55	October 24, 2025
Build failed after npm audit force Support building	1	693	April 16, 2023
New CI=true build configuration, "Treating warnings as errors because process.env.CI = true" Updates settings-config , building	67	49075	October 4, 2023

How to enforce package-lock.json

Related topics