NPM
Note: This page is a work-in-progress. Feedback and suggested improvements are welcome. Please join the discussion on moodle.org or use the page comments.
NPM is a package manager for JavaScript. It is used by Moodle developers to install a number of cli tools, primarily those related with Grunt.
npm dependency management
Tools installed by npm include things like our css/js compressors, post-processors and integrity checks. As differences in output from these tools would cause different results for different developers working on the same code, we need to ensure installed packages are the same.
npm shrinkwrap
We use a npm-shrinkwrap.json to ensure that all versions of packages are consistent for developers when they run npm install. See https://docs.npmjs.com/files/package-locks for further details on this mechanism. Note: The npm package lock mechanics changed significantly in NPM version 5.
Updating npm dependencies
Periodically we will update our npm dependencies, the process for doing this is:
- Ensure you use npm >= 5 - node version 8 (see MDL-59094 for details of why we require this version)
- Run
npm install packages-name@version
(e.g.npm install eslint@3.8.0
) - Verify that both the package.json and npm-shrinkwrap.json have been updated
- Commit to source control
