npm package-lock.json. You should commit this file