diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d37016e..084dd2e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           node-version: 22
       - name: Install dependencies
-        run: npm install
+        run: npm ci
       - name: npm run check
         run: npm run check
       - name: npm run build
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 8af807c..1c99b98 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -64,6 +64,14 @@ Next recommended task:
 
 Every contribution should include verification.
 
+This repository uses npm and commits `package-lock.json`. Install the exact
+development toolchain from a fresh checkout before running checks:
+
+```sh
+npm ci
+npm run release:check
+```
+
 Examples:
 
 - Documentation: inspect rendered Markdown or review the diff.
diff --git a/package-lock.json b/package-lock.json
new file mode 100644
index 0000000..0533cd3
--- /dev/null
+++ b/package-lock.json
@@ -0,0 +1,33 @@
+{
+  "name": "@bargekit/core",
+  "version": "0.1.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@bargekit/core",
+      "version": "0.1.0",
+      "license": "MIT",
+      "bin": {
+        "bargekit": "src/cli.js"
+      },
+      "devDependencies": {
+        "typescript": "5.9.3"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    }
+  }
+}
diff --git a/package.json b/package.json
index 1579322..5b37877 100644
--- a/package.json
+++ b/package.json
@@ -53,5 +53,8 @@
   "bugs": {
     "url": "https://github.com/rogerchappel/bargekit/issues"
   },
-  "homepage": "https://github.com/rogerchappel/bargekit#readme"
+  "homepage": "https://github.com/rogerchappel/bargekit#readme",
+  "devDependencies": {
+    "typescript": "5.9.3"
+  }
 }