npm/lockfile_only_package_json