diff --git a/fstream-npm.js b/fstream-npm.js
index <HASH>..<HASH> 100644
--- a/fstream-npm.js
+++ b/fstream-npm.js
@@ -151,7 +151,9 @@ Packer.prototype.applyIgnores = function (entry, partial, entryObj) {
       entry.match(/^\..*\.swp$/) ||
       entry === '.DS_Store' ||
       entry.match(/^\._/) ||
-      entry.match(/^.*\.orig$/)
+      entry.match(/^.*\.orig$/) ||
+      // Package locks are never allowed in tarballs -- use shrinkwrap instead
+      entry === 'package-lock.json'
     ) {
     return false
   }
ignores: always ignore package-lock.json (#<I>)