package-lock.json

as you first dowload node package depending on the package.json.
it will generate a package-lock.json； when you will download the node packages will depend on package-lock.json; if you want to update package version;you can delete the file，or npm update