Smart fix integrity changes of npm lock file
npm install lockfix
_ _ _____ _
| | ___ ___| | _| ___(_)_ __
| | / _ \ / __| |/ / |_ | \ \/ /
| |__| (_) | (__| <| _| | |> <
|_____\___/ \___|_|\_\_| |_/_/\_\




āļø Please, star me on GitHub ā it helps!
lockfix ā is a git based CLI tool, which helps to revert sha1 integrity changes of npm lock file
Before
!screenshot before
After
!screenshot after
- ā Why?
- ⨠Features
- š¾ Install
- šØ Usage
- š License
NPM has known issue of constantly changing integrity property of its lock file. Integrity may change due to plenty of reasons. Some of them are:
- npm install done on machine with different OS from one where lock file generated
- some package version updated
- another version of npm used
Intention of this tool is to prevent such changes and make integrity property secure and reliable.
- Reverts changes from sha512 to sha1. Keeps untouched changes from sha1 to sha512. sha512 algorithm is more secure.
- Works well with both package-lock.json and npm-shrinkwrap.json
- Possibility to revert any changes done by this tool
Install per project with NPM
``bash`
npm install --save-dev lockfix
or to install globally
`bash`
npm install -g lockfix
`json`
"scripts": {
"postshrinkwrap": "lockfix",
},
`bash`
lockfix
or (without install)
`bash`
npx lockfix
#### Options
`bash
Usage: lockfix [options]
Options:
-V, --version output the version number
-c, --commit make backup commit with revert instruction before applying changes
-f, --force bypass Git root directory check
-q, --quiet suppress output
-h, --help display help for command
``
This software licensed under the MIT