_               _    _____ _      
 | |    ___   ___| | _|  ___(_)_  __
 | |   / _ \ / __| |/ / |_  | \ \/ /
 | |__| (_) | (__|   <|  _| | |>  < 
 |_____\___/ \___|_|\_\_|   |_/_/\_\

lockfix

⭐️ Please, star me on GitHub — it helps!

lockfix – is a git based CLI tool, which helps to revert sha1 integrity changes of npm lock file

• ❓ Why?
• ✨ Features
• 💾 Install
• 🔨 Usage
• 📄 License

NPM has known issue of constantly changing integrity property of its lock file. Integrity may change due to plenty of reasons. Some of them are:

• npm install done on machine with different OS from one where lock file generated
• some package version updated
• another version of npm used

Intention of this tool is to prevent such changes and make integrity property secure and reliable.

• Reverts changes from sha512 to sha1. Keeps untouched changes from sha1 to sha512. sha512 algorithm is more secure.
• Works well with both package-lock.json and npm-shrinkwrap.json
• Possibility to revert any changes done by this tool

Install per project with NPM

npm install --save-dev lockfix

or to install globally

npm install -g lockfix

"scripts": {
    "postshrinkwrap": "lockfix",
},

lockfix

or (without install)

npx lockfix

Usage: lockfix [options]

Options:
  -V, --version  output the version number
  -c, --commit   make backup commit with revert instruction before applying changes
  -f, --force    bypass Git root directory check
  -q, --quiet    suppress output
  -h, --help     display help for command

This software licensed under the MIT