package-lock.json Explained

What package-lock.json does, with an example.

Published November 11, 2026

package-lock.json records the exact resolved version of every installed dependency (and sub-dependency), ensuring reproducible installs.

Key points

  • Should always be committed to version control, so every environment installs the exact same dependency tree
More JavaScript articles