Move back to package-lock v2 (#176)

Also adds a CI step to ensure that we're not merging lockfile v1.

Reviewed-on: #176
Co-authored-by: Aditya Thakral <a3thakra@csclub.uwaterloo.ca>
Co-committed-by: Aditya Thakral <a3thakra@csclub.uwaterloo.ca>

.drone.yml

@@ -4,8 +4,15 @@ type: docker
 name: node16
 
 steps:
+- name: check-lockfile
+  image: node:16
+  commands:
+  - node ./check-lockfile.js
+
 - name: install-deps
   image: node:16
+  depends_on:
+  - check-lockfile
   commands:
   - npm install
 

check-lockfile.js

@@ -0,0 +1,10 @@
+const lockfile = require('./package-lock.json')
+
+if (lockfile.lockfileVersion !== 2) {
+  console.error(`
+Please upgrade to npm v7 and revert changes to the lockfile.
+
+- \`npm i -g npm\` to upgrade.
+`.trim())
+  process.exit(1)
+}