Implementation:Evidentlyai Evidently UI PNPM Lock
| Knowledge Sources | |
|---|---|
| Domains | Frontend, Package_Management |
| Last Updated | 2026-02-14 12:00 GMT |
Overview
Lockfile that pins exact dependency versions for the Evidently UI frontend application managed by pnpm.
Description
The pnpm-lock.yaml file is an auto-generated lockfile produced by the pnpm package manager. It records the exact resolved versions, integrity hashes, and dependency tree for all npm packages used by the Evidently UI frontend. This file ensures reproducible builds across environments by locking every transitive dependency to a specific version and registry tarball.
The UI frontend is a React-based single-page application that provides the Evidently monitoring dashboard. The lockfile captures dependencies for:
- React and ReactDOM for the UI framework
- Plotly.js for data visualizations
- Material UI components
- TypeScript and build tooling (Vite, ESLint, Prettier)
- Testing frameworks (Playwright for visual regression)
Usage
This file is consumed automatically by pnpm install during development setup and CI builds. Users do not interact with this file directly. It should be committed to version control to ensure all developers and CI environments use identical dependency versions.
Code Reference
Source Location
- Repository: Evidentlyai_Evidently
- File: ui/pnpm-lock.yaml
- Lines: 1-6177
Signature
lockfileVersion: '9.0'
settings:
autoInstallPeers: true
excludeLinksFromLockfile: false
Import
# Install dependencies from lockfile
cd ui && pnpm install --frozen-lockfile
I/O Contract
Inputs
| Name | Type | Required | Description |
|---|---|---|---|
| package.json | JSON | Yes | Declares direct dependencies; pnpm resolves and locks them |
| pnpm-workspace.yaml | YAML | Yes | Defines the workspace packages for the monorepo UI structure |
Outputs
| Name | Type | Description |
|---|---|---|
| node_modules | Directory | Installed packages matching the exact locked versions |
| .pnpm store | Directory | Content-addressable storage of package tarballs |
Usage Examples
Installing Dependencies
# Standard install (uses lockfile)
cd ui
pnpm install
# CI install (fails if lockfile is out of date)
pnpm install --frozen-lockfile
Updating Dependencies
# Update a specific package
pnpm update react
# Update all packages
pnpm update
# The lockfile is regenerated automatically