commit package-lock.json

[Trek Hopton]

Currently we don’t have a shared package-lock.json file, one is generated when npm install is run. package-lock.json makes sure that all npm dependencies are the exact same version for all devs. It’s similar to how go.sum accompanies go.mod.

Someone just needs to commit a working file and we’ll go from there.

[David Sutton]

Resolved in #395