title: Do I commit the package-lock.json file created by npm 5?
body: <p><a href="http://blog.npmjs.org/post/161081169345/v500" rel="noreferrer">npm 5 was released today</a> and one of the new features include deterministic installs with the creation of a <code>package-lock.json</code> file.</p>
  
  <p>Is this file supposed to be kept in source control?</p>
  
  <p>I'm assuming it's similar to <a href="https://stackoverflow.com/questions/39990017/should-i-commit-the-yarn-lock-file-and-what-is-it-for"><code>yarn.lock</code></a> and <a href="https://stackoverflow.com/questions/12896780/should-composer-lock-be-committed-to-version-control"><code>composer.lock</code></a>, both of which are supposed to be kept in source control. </p>