In order to have 100% reproducible builds, Electron needs package-lock.json. This is necessary because some dependencies affect the build output (browserify for example, is used to generate the common js environment for sandboxed renderers).
