mozilla/npm-lockdown

npm-lockdown is a tool for Node.js application developers that locks down npm dependencies by generating a lockdown.json file with specific versions and checksums, ensuring consistent and secure installations across environments. It helps prevent unexpected breaks caused by upstream changes, offering a simpler alternative to npm's shrinkwrap while avoiding issues with optional dependencies.