Comment 2 for bug 1792394

Chris, I committed the package-lock.json file to the repo intentionally, because the internet told me to. Admittedly, it's not clear to me yet how it benefits us in practice. And seeing a pending commit with every npm install is irksome. Before we ignore it, though, I'd like to allow for some time to confirm we really don't want it there.

https://github.com/npm/npm/blob/v5.0.0/doc/files/package-lock.json.md