npm build is not considering package-lock.json, some packages are upgraded

[jonespm]

Thank you for contributing to this project!

Expected behavior (A description of what you expected to happen) :

Packages are static between deployments and updated manually. However it looks like they're updated to newer versions.

Additional context (Add any other context about the problem here) :

It was noticed that package-lock.json is ignored and not included in the builds. This file is needed to ensure the versions are predictable/static.

[pushyamig]

Tested a couple packages in Package-lock.json downloaded/used in Myla Beta

1. Apollo:

:/code/node_modules/@apollo/client$ cat version.js
export var version = '3.5.10';

2. D3 version:

:/code/node_modules/d3$ cat package.json
{
  "name": "d3",
  "version": "7.6.1",

Test passes