faker.js's history is one of the best examples why it's useful to commit the package lock file. This stabilizes also CI