[npm] reproducible builds (#8224)

Prevent package-lock.json to be automatically regenerated with npm install to have more stable builds.

- enable package-lock.json tracking (recommended practice)
- replace npm install with npm ci to achieve fast and reproducible builds
- strict packages versions from package-lock.json are now used for install. To propagate a change made into package.json, run npm install and commit the new package-lock.json.
- any version disagrement between package.json and package-lock.json will trigger an error.

Author: laemtl

.gitignore

@@ -33,5 +33,4 @@ SQL/Archive/autogenerated/single_use/*.sql
 SQL/Archive/autogenerated/*.sql
 VERSION
 .DS_Store
-package-lock.json
 .eslintcache

Makefile

@@ -10,20 +10,24 @@ VERSION: .
 phpdev:
 	composer install
 
-javascript:
+jsdev:
+	npm ci
+	npm run compile
+
+jslatest: clean
+	rm -rf package-lock.json
+	rm -rf modules/electrophysiology_browser/jsx/react-series-data-viewer/package-lock.json
 	npm install
 	npm run compile
 
-dev: VERSION phpdev javascript
+dev: VERSION phpdev jsdev
 
 clean:
 	rm -f smarty/templates_c/*
 	rm -f VERSION
 	rm -rf vendor
 	rm -rf node_modules
-	rm -f package-lock.json
 	rm -rf modules/electrophysiology_browser/jsx/react-series-data-viewer/node_modules
-	rm -f modules/electrophysiology_browser/jsx/react-series-data-viewer/package-lock.json
 
 # Perform static analysis checks
 checkstatic: phpdev

docs/wiki/00_SERVER_INSTALL_AND_CONFIGURATION/01_LORIS_Install/CentOS/README.md

@@ -19,9 +19,9 @@ In addition to the above, the following packages should be installed with `yum`
 
  * [Composer](https://getcomposer.org)  
 
- * NodeJS 16.10.0 or higher
+ * NodeJS 16.10.0 (or higher)
 
- * NPM >= 8.0  
+ * NPM 8.19.2 (or higher)
 
  * make  
 

docs/wiki/00_SERVER_INSTALL_AND_CONFIGURATION/01_LORIS_Install/Ubuntu/README.md

@@ -24,7 +24,7 @@ Additionally, the following package manager are required to build LORIS:
 
 * NodeJS 16.10.0 (or higher)
 
-* NPM
+* NPM 8.19.2 (or higher)
 
 * composer