different tip from copilot

Author: Martina-Graeber-One-Identity

.github/workflows/npm-build.yml

@@ -21,11 +21,16 @@ jobs:
     - name: Use Node.js ${{ matrix.node-version }}
       uses: actions/setup-node@v3
       with:
-        node-version: ${{ matrix.node-version }}
-
-    - name: Install packages
-      working-directory: ./imxweb
-      run: npm install
+       node-version: ${{ matrix.node-version }}
+       cache: npm
+       cache-dependency-path: imxweb/package-lock.json
+
+    - name: Install packages (clean, reproducible)
+       working-directory: ./imxweb
+      shell: bash
+      run: |
+       set -euo pipefail
+       npm ci || (rm -rf node_modules package-lock.json && npm install)
 
     - name: Build qbm
       working-directory: ./imxweb