diff --git a/.github/workflows/npm-publish-npm-packages.yml b/.github/workflows/npm-publish-npm-packages.yml
index acdfcfa7..93fb5042 100644
--- a/.github/workflows/npm-publish-npm-packages.yml
+++ b/.github/workflows/npm-publish-npm-packages.yml
@@ -15,6 +15,10 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: 20
+      - name: Validate lockfile
+        run: |
+          npm install --package-lock-only
+          git diff --exit-code package-lock.json || (echo "package-lock.json is out of sync. Run 'npm install' and commit the changes." && exit 1)
       - run: npm ci
       - run: npm run build
       - run: npm test