NPM-SHRINKWRAP(1)
💅 npm-shrinkwrap — lock down dependency versions for publication ✨
ok so this is npm-shrinkwrap from the npm fam, and she's here to lock things down before you publish. bestie, let's get into it 🎀
🦋 Synopsis
npm shrinkwrap
heads up, queen: this command is unaware of workspaces. no cap, it just doesn't know they exist. 💀
🌸 Description
okay so here's the vibe: this command repurposes package-lock.json into a publishable npm-shrinkwrap.json, or like, simply creates a brand new one if there isn't one already. either way, she delivers ✨
and the file that gets created and updated by this command? it takes precedence over any other existing or future package-lock.json files. like, main character energy fr — she's the one in charge 👑
want the whole deep-dive on the design and purpose of package locks in npm? it's giving required reading, so go see npm help package-lock-json 🫶
👀 See Also
npm help installnpm help runnpm help scriptspackage.json⟨/configuring-npm/package-json⟩package-lock.json⟨/configuring-npm/package-lock-json⟩npm-shrinkwrap.json⟨/configuring-npm/npm-shrinkwrap-json⟩npm help ls
and that's the whole page, bestie 💜 this one's from NPM@11.19.1, dated August 2026 — screenshot it, cite it, live by it 🧚⭐
📦 where this page comes from
- centos-stream 10: nodejs26-npm 1:11.19.1-1.26.8.2.1.el10 · Apache-2.0 AND Artistic-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BlueOak-1.0.0 AND CC-BY-3.0 AND CC0-1.0 AND ISC AND MIT
- centos-stream 9: npm 1:11.19.1-1.26.8.2.2.module_el9+1444+554f3837 · Apache-2.0 AND Artistic-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BlueOak-1.0.0 AND CC-BY-3.0 AND CC0-1.0 AND ISC AND MIT
- nixpkgs unstable: heroku 11.11.0
- 💖 girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms