Add package-lock.json for reproducible builds (fixes #362).

.github/workflows/test.yml

@@ -14,7 +14,7 @@ jobs:
     steps:
     - uses: actions/checkout@v6
     - uses: actions/setup-node@v6
-    - run: npm install
+    - run: npm clean-install
     - run: npm run test
   no-globs:
     name: No globs (README.md, 0 errors)

.npmrc

@@ -1,2 +1,2 @@
 ignore-scripts=true
-package-lock=false
+package-lock=true