Why is package-lock.json ignored ?

[cpoppema]

Version

master

File / Feature

.gitignore

Expected behaviour

Track the file package-lock.json

Actual behaviour

package-lock.json is ignored.

Stacktrace / Error message

-

Other info

package-lock.json has a very specific purpose. This is useful so new builds use the exact same versions this repository guaranteed to be working. This is also required to have a successful review process for Firefox builds: if versions have been bumped after building the xpi/before a reviewer starts building from provided source files and the output is different you have a rejected build and can start over.