npm should i keep package lock code example Example: npm create package lock npm install --package-lock