package-lock-only

This is a test if it is possible to register a plugin with the same name as an npm install flag.

npm i --package-lock-only
npm i package-lock-only

Background

• crossenv malware on the npm registry - https://blog.npmjs.org/post/163723642530/crossenv-malware-on-the-npm-registry