Join GitHub today
GitHub is home to over 36 million developers working together to host and review code, manage projects, and build software together.Sign up
Package locking for node modules. #4283
https://docs.npmjs.com/files/package-lock.json should explain most of it, but the idea is that everything used to build the client is locked to consistent versions, regardless of who's building.
*edit: regarding upgrades, or when versions are unreachable, it's easy to overwrite the lock file with a new one with a lock_delete/rebuild.