topic Re: @arcgis/create - package-lock.json in .gitignore in ArcGIS JavaScript Maps SDK Questions

@arcgis/create - package-lock.json in .gitignore

NicolasGIS — Mon, 16 Mar 2026 12:50:04 GMT

Hello,

Just tested @arcgis/create: thanks JS team, great initiative !

I was surprised though to find out that `package-lock.json` is in .gitignore by default.

According to npm, this file is meant to be commited:

https://docs.npmjs.com/cli/v11/configuring-npm/package-lock-json

```

This file is intended to be committed into source repositories, and serves various purposes

```

Obviously, you did it on purpose for a reason and I would curious to know why.

Thanks

Re: @arcgis/create - package-lock.json in .gitignore

OmarKawach — Mon, 16 Mar 2026 22:30:01 GMT

Nice catch!

We developed the application templates part of the `@arcgis/create` CLI to be package manager-agnostic, which is why lock files are not included by us. Another reason is that Dependabot is enabled by default in https://github.com/Esri/jsapi-resources, and adding `package-lock.json` to `.gitignore` reduces noise. We still monitor things elsewhere outside the repository.

However, we can see how this would be an inconvenience.

We'll update the `.gitignore` files now and report back once complete.

Thanks,

- Omar Kawach

UPDATE: https://github.com/Esri/jsapi-resources/commit/47dbd4d551581ad3bf5d122d04c02fa8f1f3437d

Re: @arcgis/create - package-lock.json in .gitignore

NicolasGIS — Mon, 13 Apr 2026 13:14:55 GMT

Thanks for your quick reply and fix @OmarKawach !