有没有办法强制 npm 生成 package-lock.json？

Question

I deleted it by accident and have made many changes to package.json since. An npm install or npm update do not generate package-lock.json anymore. I tried clearing my npm cache and my nvm cache, but nothing seems to be working. I tried it on several versions of Node.js (6.10.3 Node.js - 3.10.10 npm is what I would like it to work on), and it doesn't work on any.

Is there a way to force npm to generate the package-lock.json file?

Answer 1

In npm 6.x and 7.x you can use

npm i --package-lock-only

According to https://docs.npmjs.com/cli/install.html

The --package-lock-only argument will only update the package-lock.json, instead of checking node_modules and downloading dependencies.

Answer 2

By default, package-lock.json is updated whenever you run npm install . However, this can be disabled globally by setting package-lock=false in ~/.npmrc .

When the global package-lock=false setting is active, you can still force a project's package-lock.json file to be updated by running:

npm install --package-lock

This command is the only surefire way of forcing a package-lock.json update.

Answer 3

This is answered in the comments; package-lock.json is a feature in npm v5 and higher. npm shrinkwrap is how you create a lockfile in all versions of npm .

Answer 4

As several answer explained the you should run:

npm i

BUT if it does not solve...

Check the version of your npm executable. (For me it was 3.xx which doesn't uses the package-lock.json (at all))

npm -v

It should be at least 5.xx (which introduced the package-lock.json file.)

To update npm on Linux, follow these instructions.

For more details about package files, please read this medium story.

Answer 5

If your npm version is lower than version 5 then install the higher version for getting the automatic generation of package-lock.json .

Example: Upgrade your current npm to version 6.14.0

npm i -g npm@6.14.0

You could view the latest npm version list by

npm view npm versions

Answer 6

当使用本地包时，我发现可靠地重新生成 package-lock.json 文件的唯一方法是删除它，以及在链接的模块和所有相应的 node_modules 文件夹中，并让它使用npm i重新生成

Answer 7

I deleted it by accident and have made many changes to package.json since. An npm install or npm update do not generate package-lock.json anymore. I tried clearing my npm cache and my nvm cache, but nothing seems to be working. I tried it on several versions of Node.js (6.10.3 Node.js - 3.10.10 npm is what I would like it to work on), and it doesn't work on any.

Is there a way to force npm to generate the package-lock.json file?