package-lock.json

[wayofthefuture]

In the newer version of Node 8 there is a file called package-lock.json.

If this file resides in the directory will npmbox use this file? If not, then I guess this would mean the npmboxed version of a repo may have different sub-dependencies lower down in the tree across subsequent box builds?