There are currently two lockfiles in the repository, yarn.lock and package-lock.json. Two (possible) ways that this should be mitigated:
Choose a preferred package manager (personally in favor of yarn or pnpm)
Exclude a preferred package manager (as this is a library, there's no need to have a lockfile, especially considering that it encourages CI to test against unpinned files that won't be replicated).
There are currently two lockfiles in the repository,
yarn.lock
andpackage-lock.json
. Two (possible) ways that this should be mitigated: