The package-lock.json is a file generated in the root folder of node.js based projects. Why is it at the root outside the react project folder?