diff --git a/.gitignore b/.gitignore
index 24ceac8ff..0bf60608a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,3 +34,8 @@ node_modules
 # generated output
 lib/
 **/.nyc_output/
+
+# Only apps should have lockfiles
+yarn.lock
+package-lock.json
+npm-shrinkwrap.json
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 000000000..43c97e719
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+package-lock=false