Hacker News Reader

Before lockfiles I would pin version in my package.json file. Now, I still pin version in my package.json file ;)

package-lock is for pinning transitive dependencies, which package.json has no control over