WIP: Noissue - Regenerate package-lock.json to actually pin versions

I realized that every time I run npm install the contents of package-lock.json are changing. After closer inspection, it turned out that the package-lock.json that was initially added didn't pin exact versions. Please let me know if I miss something, but as far as I understand, a package-lock.json that doesn't pin exact versions but just copies over the version specs from the package.json files has no effect.