Azure / Azure/static-web-apps

Prefer npm ci

Open
#369 9 comments 12 reactions 0 assignees View on GitHub
github-action oryx
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

I noticed that `npm install` is used instead of `npm ci` when building my static web app. It's an Angular app that I setup, and I would prefer it if the build would use `npm ci` to install the packages from the package-lock.json file so that I am sure versions don't shift around.

Here's the log I'm seeing:

```
Using Node version:
v14.15.1

Using Npm version:
6.14.8

Installing production dependencies in '/working_dir/mystaticwebapp/.oryx_prod_node_modules'...

Running 'npm install --unsafe-perm --production'...
added 86 packages from 83 contributors and audited 1632 packages in 12.251s

4 packages are looking for funding
run `npm fund` for details

found 0 vulnerabilities

Copying production dependencies from '/working_dir/mystaticwebapp/.oryx_prod_node_modules' to '/working_dir/mystaticwebapp/node_modules'...
Done in 0 sec(s).

Running 'npm install --unsafe-perm'...
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.