Your question is Difference Between package.json and package-lock.json. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
What is the difference between package.json and package-lock.json?
Explain the purpose of each file, what information it contains, whether both should be committed, and how npm uses them during installation. Also describe when npm install and npm ci behave differently.