Re:Case Study: Npm uses Rust for its CPU-bound bottlenecks [...
by dpcx on Sunday March 03, 2019 @03:49PM
(#19296762)
`npm install` is what you the developer would run when you first clone a project; it should install exactly what's in the package-lock.json file. Unfortunately, it sometimes doesn't do that.
EDIT: I misunderstood and thought you were talking about installing a package. If you're running `npm install` to just reinstall dependencies then yes the lockfile should not be modified. However it seems like that is indeed the case and you may be talking about a prior bug with NPM.