No lock file

[RossSmyth]

Please add an npm lock file.

1. It allows people to install the exact versions that the application was tested with
2. Makes the application more resistant to npm supply chain attacks

Thanks