why npm creates a package-lock code example Example: npm generate package-lock.json npm install --package-lock