title: What is the NPM equivalent of "yarn install --frozen-lockfile"?
body: <p>I'm using <code>npm</code> as part of me building the production docker image.
  I want to make sure the <code>package-lock.json</code> doesn't change and matches.</p>