Avoid using a lockfile

[delvedor]

Lockfiles are very useful when working with big applications, but are not published on npm.
Which means that your users, you, and your CI, might use different versions of dependencies if you use lockfiles.

As a rule of thumb, I would suggest to always avoid the use of lockfiles on modules that will be published on npm in the future :)