From what I've seen as a contractor usually there is no package-lock at all.