On: Npm v5.0.0 released

[kuschku]

Or even package.lock.json

[evolve2k → kuschku]

I had originally been for package.lock, but after reading right through the issue I now agree with your excellent suggestion of package.lock.json.

Rather than just talk here, I've posted against the issue suggesting this approach basically asking for up/down votes. https://github.com/npm/npm/pull/16441#issuecomment-304458746