mirror of https://github.com/node-red/node-red.git
3df161c3bc
- Remove package-lock.json from .gitignore - Add validated package-lock.json (Node 20, 1003 packages) - Update CI workflow to use npm ci instead of npm install - Update README development instructions to use npm ci This ensures all developers and CI get identical dependency trees, protecting against npm supply chain attacks where compromised patch versions could automatically propagate through semver ranges. Closes #5424 |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| scripts | ||
| workflows | ||
| PULL_REQUEST_TEMPLATE.md | ||
| dependabot.yml | ||