package-lock-only

This is a test if it is possible to register a plugin with the same name as an npm install flag. ``` npm i --package-lock-only npm i package-lock-only ```

Background

• crossenv malware on the npm registry - https://blog.npmjs.org/post/163723642530/crossenv-malware-on-the-npm-registry