6e052a4243
Since we are using `yarn` to install dependencies, it makes sense to use `yarn.lock` as the lockfile (and get rid of the unused `package-lock.json`).