Track package-lock.json for deterministic builds (#44)

* Track package-lock.json for deterministic builds

- Remove package-lock.json from .gitignore
- Add CI check to verify no private registry URLs in package-lock.json
- Add fresh package-lock.json from registry.npmjs.org

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* Mark package-lock.json as generated in .gitattributes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Jonathan Hefner 2025-12-01 14:06:32 -06:00 • committed by GitHub
commit 5e78a1ef05
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

1
.gitattributes vendored Normal file
View file

@ -0,0 +1 @@
package-lock.json linguist-generated=true