proper-lockfile npm

This project isn't being tracked yet.