Should package-lock.json also be published? : <p>npm 5 introduced <em>package-lock.json</em>, of which the documentation is <a href="https://docs.npmjs.com/files/package-lock.json" rel="noreferrer">here</a>.</p>

<p>It states that the file is intended to be included with version control, so anyone cloning your package and installing it will have the same dependency versions. In other words, you should not add it to your <em>.gitignore</em> file.</p>

<p>What it does not state is wether or not the file is intended to be included with a published package. This question could be rephrased as; <em>should package-lock.json be included in .npmignore?</em></p>
