Implementation:Promptfoo Promptfoo Root Package Lock

Knowledge Sources	Promptfoo_Promptfoo
Domains	Build_System, Dependencies
Last Updated	2026-02-14 07:45 GMT

Overview

Root npm lockfile that pins exact dependency versions for the entire promptfoo monorepo, including workspaces for the web UI (src/app) and documentation site (site).

Description

The Root_Package_Lock (package-lock.json) is the npm v3 lockfile for the entire promptfoo monorepo. At 44,000+ lines, it locks the complete transitive dependency tree for 100+ direct dependencies across the main package, the src/app workspace (React web UI), and the site workspace (Docusaurus documentation). It ensures reproducible builds across all development, CI, and production environments.

Usage

This file is consumed automatically by npm install at the repository root. It should not be edited manually; it is regenerated by npm when dependencies change.

Code Reference

Source Location

• Repository: Promptfoo_Promptfoo
• File: package-lock.json
• Lines: 1-44151

Signature

{
  "name": "promptfoo",
  "version": "0.120.24",
  "lockfileVersion": 3,
  "packages": { /* full dependency tree */ }
}

Import

npm install  # Reads package-lock.json for exact versions

I/O Contract

Inputs

Name	Type	Required	Description
(none)	—	—	Read by npm during install

Outputs

Name	Type	Description
node_modules	Directory	Exact pinned dependency tree for all workspaces

Related Pages

• Environment:Promptfoo_Promptfoo_Node_Runtime