Skip to content

Deprecated shrinkwrap in .npmrc #94

Description

@MikeMcC399

Situation

.npmrc includes the configuration:

shrinkwrap=false

This causes a warning:

npm warn config shrinkwrap Use the --package-lock setting instead.

The deprecation is first noted in https://docs.npmjs.com/cli/v7/using-npm/config#shrinkwrap which continues also in https://docs.npmjs.com/cli/v11/using-npm/config#shrinkwrap


shrinkwrap

  • Default: true
  • Type: Boolean
  • DEPRECATED: Use the --package-lock setting instead.

Alias for --package-lock


npm 12 no longer lists shrinkwrap

Steps to reproduce

Ubuntu 24.04.4 LTS, Node.js 20.20.1

git clone pkgjs/action pkgjs-action
cd pkgjs-action
npm install

Logs

$ npm install
npm warn config shrinkwrap Use the --package-lock setting instead.
npm warn deprecated eslint@9.39.5: This version is no longer supported. Please see https://eslint.org/version-support for other options.

added 133 packages, and audited 134 packages in 2s

28 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities

Suggestion

Remove shrinkwrap=false from .npmrc. The equivalent package-lock=false is already listed.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions