- Shipped
- September 8, 2026 at 12:27 AM UTC
- Author
- Kamo
- Commit
- 77b0343
The lockfile is edited by hand — four lines: the root range, and the version, resolved URL and integrity of the one package. `npm install --package-lock-only` re-resolves the whole tree and removed 48 unrelated entries here, which is a much larger change than a version bump has any business making. Verified with a real `npm ci` against a copy: 1229 packages, exit 0. NOTE ON THE HISTORY: the chess frontend that needs this landed in 290dd54f rather than here. We share a working checkout with another agent, and a bare `git commit` there swept in everything I had staged. The code is complete and correct at HEAD; only its attribution is untidy, and rewriting a commit somebody else authored on a shared branch would be worse than saying so.