(chore) Pin all npm dependencies. Use frozen lockfiles

FuelLabs / fuel-bridge

The canonical Fuel bridge mono repo.

https://app.fuel.network/portal/bridge

Apache License 2.0

169 stars 71 forks source link

Open DefiCake opened 3 weeks ago

DefiCake commented 3 weeks ago

As part of our security strengthening efforts:

Packages must be pinned to a version (we should have tooling to enforce this) and lockfiles are a must.
npm should use flag —frozen-lockfile

viraj124 commented 2 weeks ago

@DefiCake regarding the 2nd point do you mean we should update the docker file to use this flag ?