1NPM-SHRINKWRAP.JSON(5) NPM-SHRINKWRAP.JSON(5)
2
3
4
6 npm-shrinkwrap.json - A publishable lockfile
7
8 Description
9 npm-shrinkwrap.json is a file created by npm help npm shrinkwrap. It is
10 identical to package-lock.json, with one major caveat: Unlike pack‐
11 age-lock.json, npm-shrinkwrap.json may be included when publishing a
12 package.
13
14 The recommended use-case for npm-shrinkwrap.json is applications de‐
15 ployed through the publishing process on the registry: for example,
16 daemons and command-line tools intended as global installs or devDepen‐
17 dencies. It's strongly discouraged for library authors to publish this
18 file, since that would prevent end users from having control over tran‐
19 sitive dependency updates.
20
21 If both package-lock.json and npm-shrinkwrap.json are present in a
22 package root, npm-shrinkwrap.json will be preferred over the pack‐
23 age-lock.json file.
24
25 For full details and description of the npm-shrinkwrap.json file for‐
26 mat, refer to the manual page for npm help package-lock.json.
27
28 See also
29 • npm help shrinkwrap
30
31 • npm help package-lock.json
32
33 • npm help package.json
34
35 • npm help install
36
37
38
39
40 January 2022 NPM-SHRINKWRAP.JSON(5)