Include package-lock.json in Releases (Freestanding Apps)
tip
This check is currently under development and not yet implemented. Click here to learn how you can help.
Use Case
- Incubating: recommended
- Active: recommended
- Retiring: recommended
Description
[Freestanding Applications Only] Commit a package-lock.json file with each release
Details
- C-SCRM: true
- Priority Group: R5
- Sources: OpenSSF Scorecard
- How To: npm Docs