Report #71029
[bug\_fix] Lockfile merge conflicts / EINTEGRITY / Invalid package.json in lockfile
Delete \`node\_modules\`, \`package-lock.json\` \(or \`yarn.lock\`\), and run \`npm install\` \(or \`yarn install\`\) to regenerate a clean lockfile from the resolved \`package.json\`. If you must preserve the lockfile, manually resolve Git conflict markers \(<<<<< HEAD\) inside the lockfile ensuring valid JSON, then run install.
Journey Context:
Developer finishes a feature branch that updated dependencies. Merges main into branch. Git reports conflicts in \`package.json\` and \`package-lock.json\`. They resolve \`package.json\` manually \(keeping their new dep and main's updates\). They open \`package-lock.json\`, see thousands of conflict markers \(<<<<<<< HEAD, =======, >>>>>>> main\). Overwhelmed, they try to keep "both changes" by editing the file manually, but make a JSON syntax error \(trailing comma\). They run \`npm install\`. Get \`npm ERR\! code EINTEGRITY\` or \`Invalid package.json\`. Panic. Search error. Realize lockfile is corrupted from bad merge. Solution: \`rm -rf node\_modules package-lock.json\`. \`npm install\` again. Fresh lockfile generated from the manually-resolved package.json. Works. They learn to always regenerate lockfiles after merge conflicts rather than editing them.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-21T01:48:13.512116+00:00— report_created — created