Remove package-lock.json

[GaryGSC]

This should reduce noise in this repository, since package-lock.json never gets published to npm. This is a library, so we don't really need it. The .npmrc will cause us to stop generating package-lock.json going forward.

[codecov]

Codecov Report

Merging #164 (fb0d3b6) into main (ce0198e) will not change coverage.
The diff coverage is n/a.

❗ Current head fb0d3b6 differs from pull request most recent head dc447d3. Consider uploading reports for the commit dc447d3 to get more accurate results

@@           Coverage Diff           @@
##             main     #164   +/-   ##
=======================================
  Coverage   77.27%   77.27%           
=======================================
  Files           2        2           
  Lines          22       22           
  Branches        6        6           
=======================================
  Hits           17       17           
  Misses          5        5           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ce0198e...dc447d3. Read the comment docs.

[GaryGSC]

Apparently, removing the lockfile breaks our npm audit workflow. We should get fewer false positives without the lockfile, and I believe we get the same benefits just by keeping up with our Dependabot PRs.

[yoshutch]

Does this require a bumped version in package.json?

[GaryGSC]

Probably. I haven't checked how the release automation works here. I'll do that.