git or not-to-git lock files

Author: gambitier

session 3/chapters/1. Software Package Manager.md

@@ -121,3 +121,21 @@ When you have `'type': 'module'` in the package.json file, your source code shou
 - Adding `'type': 'module'` to the package.json enables `ES6` modules.
 
 ![ES6](../images/type-es6.jpg)
+
+# Always check in lock files
+
+tl;dr
+
+    Put it in GIT
+    Commit it every-time it changes
+    Never delete it
+
+### Why not just keep exact versions in package.json?
+
+Your package.json only points to the versions of your direct dependencies. If they have dependencies too (and they do), these versions won't be locked.
+
+### ref
+
+https://nodejs.dev/learn/the-package-lock-json-file
+
+https://dev.to/adamklein/package-lock-json-in-git-or-not-50l5