Do I commit the package-lock.json file created by npm 5? Do I commit the package-lock.json file created by npm 5? node.js node.js