Glossary: Web App Security and Authentication

Lockfile

Also written: package-lock.json, npm ci

package-lock.json records every package's exact version and integrity hash. npm ci installs exactly that and fails if a download's hash differs.