Ignore package-lock.json as we saw some issues with that

src/Handler.php

@@ -426,7 +426,7 @@ class Handler
       $this->npm('update');
     }
     else {
-      $this->npm('install');
+      $this->npm('install --no-shrinkwrap');
     }
 
     // Handle Bower if not installed globally