No POD found for package-lock.json. Time to read the source?