Using package.json and package-lock.json files