npm ERR! `npm ci` can only install packages when your package.json and package-lock.json are in sync
package-lock.json doesn’t match package.json, so npm ci refuses to install.
Exact message you may see
can only install packages when your package.json and package-lock.json are in syncMissing: from lock file
Seen on:
npm
Meaning
Someone changed package.json without updating the lockfile, or the lockfile was generated with a different npm version.
Common causes
- package.json edited manually without npm install
- Lockfile not committed after changes
- Different npm major versions across team/CI
⚡ Quick fix
- Run npm install locally and commit package-lock.json
- Align npm versions (engines/packageManager field)
Detailed fix by platform
npm
npm install && git add package-lock.json && git commit -m "Update lockfile"
How to diagnose
- Diff — Which packages are missing/invalid in the message?
- Recent change — Did it start after a deploy, upgrade, or configuration change? Compare with the last working version.
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
- AADSTS70021 AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity)
- Cache not found / Unable to reserve cache GitHub Actions: Cache not found for input keys: npm-Linux-abc123 / Failed to save: Unable to reserve cache with key, another job may be creating this cache
- Command CodeSign failed Command CodeSign failed with a nonzero exit code (errSecInternalComponent / resource fork, Finder information not allowed)
Most viewed in npm
Other ways to find it
Where this error sits
Origin: Build & delivery. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Did this fix work for you?
Report a correction or suggest an improvement
Last updated 14 Oct 2026