Browse Source

Change npm install to npm ci in contributing guide (#31859)

`ci` installs exactly what's in `package-lock.json` where as `install` installs compatible versions.

Given today's [issue](https://www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised) it's probably best to tell uses to use `ci` and not `install`
Greggman 4 months ago
parent
commit
f1688d0c89
1 changed files with 1 additions and 1 deletions
  1. 1 1
      .github/CONTRIBUTING.md

+ 1 - 1
.github/CONTRIBUTING.md

@@ -18,7 +18,7 @@ It is assumed that you know a little about Node.js and Git. If not, [here's some
 
 * Install the dependencies
 
-      npm install
+      npm ci
 
 ## Next Steps
 

粤ICP备19079148号