npm 5 adds a new package-lock:
https://github.com/npm/npm/blob/5fe65673f9f3ab0c627aa30ed8d92c83e67b3713/doc/spec/package-lock.md#package-lock-and-npm-shrinkwrap