NPM ci succeeds when package-lock.json doesn't match package.json (2021)
github.com