So, if you're okay with me locking a package myself... why can't NPM just do the locking for me? That's what's happening with this new change. After all, I'm n

So, if you're okay with me locking a package myself... why can't NPM just do the locking for me? That's what's happening with this new change. After all, I'm not a developer because I like administrative work – I want to build stuff, and NPM takes the hassle out of this.