Settle on either "package-lock.json" or "yarn.lock"

[PaulRBerg]

It's not good practice to track both lock files in version control. npm and yarn behave differently, so they may end up overriding each other's node_modules directories.