What is package lock json? Lockfiles for yarn & npm packages | Snyk
How To Secure Your Package Manager's Lockfiles
Optimize Dockerfile By `Yarn Prune` - DEV Community
Yarn install fails with "Lockfile has incorrect entry" error if the package version includes buildno & commit-hash and if we use version range(~, ^) when defining it as a dependency · Issue #