Gitignore

Specifies intentionally untracked files to ignore

package-lock.json

For dependency management, the following files are also managed using Git:

• package-lock.json
• composer.lock
• yarn.lock

It describes the exact tree that was generated, such that subsequent installs are able to generate identical trees, regardless of intermediate dependency updates.

• docs.npmjs.com/cli/v8/configuring-npm/package-lock-json

gitignore.io

Create useful .gitignore files for your project

• toptal.com/developers/gitignore