hocus pocus to stop “sha-swapping” in lockfiles below
% git checkout branch-you-working-on
% rm -rf node_modules
% npm cache clean -f
% npm i
this should stop that sha1 <-> sha512 crap from happening to your local lockfiles when you do a random npm i after pulling/rebasing a branch.
or, you could just do an npm ci assuming you're not installing modules yourself.
ymmv! etc