Verify that package-lock.json is up to date

[joladev]

As far as I can tell with npm you use npm ci instead of npm install to verify that the package-lock.json is up to date.

Pros

• Optimized for CI
• Errors if someone forgets to update package-lock.json
• Always does a clean install

Cons

• Clears node_modules before it runs (no caching)