.npmrc

# Keep transitive npm packages reachable from the root node_modules so
# shadow-cljs browser builds can resolve them during compile and watch.
shamefully-hoist=true

# Prefer reusing the existing lockfile on regular installs.
# pnpm will try a frozen install first and may fall back to updating the lockfile
# if package.json changes are not reflected in pnpm-lock.yaml.
#
# This helps prevent:
# - unnecessary lockfile churn during routine local installs
# - dependency drift between developers or CI environments
# - non-reproducible builds across Windows / Linux / macOS
#
# CI should still use `pnpm install --frozen-lockfile` when a strict failure is required.
# To intentionally refresh dependencies or regenerate the lockfile, run:
#   pnpm install --no-frozen-lockfile
#
# Recommended for local developer installs in team projects; pair it with
# `--frozen-lockfile` in CI for strict enforcement.
prefer-frozen-lockfile=true