Do I commit the package-lock.json file created by npm 5? Do I commit the package-lock.json file created by npm 5? git git