you have to use `npm ci`, which was added a few years ago. my team ran into that kind of issue right after `ci` was added, thankfully, or we would've had to do something similar.
i now have this aliased to `ni`, so i get to say `ni` to the app often.