Streams
package.json vs package-lock.json