Ignores package-lock.json

[pgraham]

Directory contents:

- gulpfile.js
+ /dist
  - package.json
  - package-lock.json

gulpfile.js

const gulp = require('gulp');
const shrinkwrap = require('gulp-shrinkwrap');

gulp.task('npm-shrinkwrap', () => {
    return gulp.src('dist/package.json')
        .pipe(shrinkwrap())
        .pipe('dist/');
});

gulp.task('default', [ 'npm-shrinkwrap' ]);

Running gulp from the top level directory produces the following output:

Starting 'npm-shrinkwrap'...
npm WARN invalid config loglevel="notice"
wrote npm-shrinkwrap.json

And the contents of dist/ are:

+ /dist
  - package.json
  - package-lock.json
  - npm-shrinkwrap.json

However, if I cd into dist/ and run npm shrinkwrap this is the output and directory listing:

npm notice package-lock.json has been renamed to npm-shrinkwrap.json. npm-shrinkwrap.json will be used for future installations.

+ /dist
  - package.json
  - npm-shrinkwrap.json

Steps to reproduce:

1. Run gulp-shrinkwrap against a package.json file that is a sibling of a package-lock.json file.

Expected results: package-lock.json is renamed to npm-shrinkwrap.json

Actual results: a new npm-shrinkwrap.json file is generated and the existing package-lock.json file is left intact.