Track package-lock.json for deterministic builds (#44)

* Track package-lock.json for deterministic builds

- Remove package-lock.json from .gitignore
- Add CI check to verify no private registry URLs in package-lock.json
- Add fresh package-lock.json from registry.npmjs.org

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* Mark package-lock.json as generated in .gitattributes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
This commit is contained in:
Jonathan Hefner 2025-12-01 14:06:32 -06:00 • committed by GitHub
commit 5e78a1ef05
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

1
.gitignore vendored
View file

@ -1,7 +1,6 @@
.DS_Store
dist/
node_modules/
package-lock.json
yarn.lock
.vscode/
docs/api/