@adamchainz Isn't it all package-lock.json?