What is package-lock.json, and why should it be committed?

Write or say your answer first, then compare it with the model answer.