package-lock.json is tracked in git?

yes, looks like package-lock.json is tracked in git