From 8556df595877976eaafed8a0a4b53583a75d2a55 Mon Sep 17 00:00:00 2001 From: Tom Jenkinson Date: Sat, 5 Oct 2019 18:27:33 +0100 Subject: [PATCH] use `npm ci` instead of `npm install` because this is quicker, but also validates that the package-lock is in sync with the package.json Without this anything in the package.json that is out of sync with the package-lock gets silently updated and the integrity is not checked --- scripts/travis.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/travis.sh b/scripts/travis.sh index de477cac101..70bee9171bf 100755 --- a/scripts/travis.sh +++ b/scripts/travis.sh @@ -3,7 +3,7 @@ set -ev echo "travis_fold:start:npm_install" -npm install +npm ci echo "travis_fold:end:npm_install" if [ "${TRAVIS_MODE}" = "build" ]; then