Merge pull request #5426 from dimitrieh/fix/reproducible-dependency-chain

Add package-lock.json for reproducible dependency chains

.github/workflows/tests.yml

@@ -24,7 +24,7 @@ jobs:
       with:
         node-version: ${{ matrix.node-version }}
     - name: Install Dependencies
-      run: npm install
+      run: npm ci
     - name: Run tests
       run: |
         npm run test

.gitignore

@@ -27,7 +27,6 @@ docs
 .vscode
 .nyc_output
 sync.ffs_db
-package-lock.json
 .editorconfig
 test/resources/50-file-test-file.txt
 test/unit/@node-red/runtime/lib/nodes/.testUserHome

README.md

@@ -52,7 +52,7 @@ If you want to run the latest code from git, here's how to get started:
 
 2. Install the node-red dependencies
 
-        npm install
+        npm ci
 
 3. Build the code