Currently we bundle an npm-shrinkwrap.json file in the CLI package which locks the dependency tree at install time. npm 12 will no longer respect this file and requires us to bundle dependencies instead:
npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
Source: https://github.com/npm/cli/releases?page=5#release-v12.0.0-pre.0.0
Currently we bundle an
npm-shrinkwrap.jsonfile in the CLI package which locks the dependency tree at install time. npm 12 will no longer respect this file and requires us to bundle dependencies instead:Source: https://github.com/npm/cli/releases?page=5#release-v12.0.0-pre.0.0