`package-lock.json` is a file that newer versions of NPM generated
when installing dependencies.
> It describes the exact tree that was generated, such that
> subsequent installs are able to generate identical trees,
> regardless of intermediate dependency updates.
> This file is intended to be committed into source repositories.
– https://docs.npmjs.com/files/package-lock.json