Tool for smart revert of integrity changes for npm lock file
_
| | __ | | | _()
| | / _ \ / | |/ / | | \ \/ /
| |__| () | (| <| | | |> <
|___/ _||\_| |//_\
⭐️ Please, star me on GitHub — it helps!
lockfix – is a git based CLI tool, which helps to revert sha1
integrity changes of npm lock file
NPM has known issue of constantly changing integrity
property of its lock file. Integrity may change due to plenty of reasons. Some of them are:
npm install
done on machine with different OS from one where lock file generatednpm
usedIntention of this tool is to prevent such changes and make integrity
property secure and reliable.
sha512
to sha1
. Keeps untouched changes from sha1
to sha512
. sha512
algorithm is more secure.package-lock.json
and npm-shrinkwrap.json
Install per project with NPM
npm install --save-dev lockfix
or to install globally
npm install -g lockfix
package.json
"scripts": {
"postshrinkwrap": "lockfix",
},
lockfix
or (without install)
npx lockfix
Usage: lockfix [options]
Options:
-V, --version output the version number
-c, --commit make backup commit with revert instruction before applying changes
-f, --force bypass Git root directory check
-q, --quiet suppress output
-h, --help display help for command
This software licensed under the MIT