npm's package.json and package-lock.json get out of sync constantly on my team. at least go only has one file to mess up