node.js - 什么是 package-lock.json？

Question

有哪位好心的老师可以回答我上面的问题吗？

仅供引用，我正在使用 WebStorm 并使用 node.js 制作我安装了像 nconf 和 package-lock.json 这样的 npm 模块。我预计 package.json 会被制作出来。

谢谢。

Answer 1

描述给定时刻的依赖关系树，因此通过此描述，可以完全按照原来的方式再次创建所有依赖关系，这确保了依赖关系的预期行为。

在npm documentation你可以阅读:

package-lock.json is automatically generated for any operations where npm modifies either the node_modules tree, or package.json. It describes the exact tree that was generated, such that subsequent installs are able to generate identical trees, regardless of intermediate dependency updates.

This file is intended to be committed into source repositories, and serves various purposes:

Describe a single representation of a dependency tree such that teammates, deployments, and continuous integration are guaranteed to install exactly the same dependencies.

Provide a facility for users to "time-travel" to previous states of node_modules without having to commit the directory itself.

To facilitate greater visibility of tree changes through readable source control diffs.

And optimize the installation process by allowing npm to skip repeated metadata resolutions for previously-installed packages.