running npm ci . This concept is not new, and other programming languages package managers (like Composer in PHP) have used a similar system for years. The package-lock.json file needs to be committed