Why does "npm install" rewrite package-lock.json? Why does "npm install" rewrite package-lock.json? node.js node.js