[RRFC] Please don't store registry info in `packge-lock.json`

[JounQin]

Motivation ("The Why")

It's very bad for different users prefer different registries globally, I accidentally commit unexpected changes several times.

Example

FYI, yarn 2+ and pnpm don't store registry info in their lockfile.

How

Current Behaviour

Read it from .npmrc instead.

Desired Behaviour

As title, registry should not be stored into package-lock.json, it would also make package-lock.json much smaller.

References

• yarn: https://yarnpkg.com/configuration/yarnrc#npmRegistryServer
• pnpm: https://pnpm.io/settings#registry--authentication-settings

[alexgwolff]

https://docs.npmjs.com/cli/v8/using-npm/config#omit-lockfile-registry-resolved

[JounQin]

https://docs.npmjs.com/cli/v8/using-npm/config#omit-lockfile-registry-resolved

Thanks for letting me know about it, it would be great to enable it by default?