Package Lock

Noun · Development

Definitions

  1. A file (typically `package-lock.json` for npm, `yarn.lock` for Yarn, or `pnpm-lock.yaml` for pnpm) that records the exact resolved version, integrity hash, and dependency tree for every installed package, ensuring that `npm install` produces an identical `node_modules` on every machine regardless of what newer versions have been published.

    In plain English: A file that locks down the exact versions of every dependency so everyone on the team installs the same thing.

    Example: "The build broke on CI because someone forgot to commit the package lock, so it resolved a different version of the date library."

Related Terms