2 ms·package-lock is for pinning transitive dependencies, which package.json has no control overby fiddlerwoaroof 7y agopackage-lock is for pinning transitive dependencies, which package.json has no control over