Glossary term
What is lock file (Lock file (package-lock.json))?
lock file stands for Lock file (package-lock.json).
A file that records the exact version, address and checksum of every installed package so installs repeat exactly.
Learn it properly · Security for DevelopersLesson 6: Dependencies and the Supply Chain: npm, Lockfiles and GitHub ActionsHow a package you did not write can hurt you: typosquatting, install scripts, malicious updates. Lockfiles, npm audit, Dependabot, secret scanning and securing your CI.