title: Is there a way of making "npm ci" install devDependencies, or "npm install" not update package-lock.json?
body: <p>I'm trying to put together documentation for new developers installing our codebase on their local development environments.  I'd like to give them command(s) that:</p>
  
  <ul>
  <li>Installs both devDependencies and dependencies based on the versions in package-lock.json</li>
  <li>Doesn't update package-lock.json </li>
  </ul>
  
  <p>"npm ci" does almost exactly what I want, but doesn't seem to install devDependencies.  "npm install" does install devDependencies, but it sometimes modifies package-lock.json. </p>
  
  <p>I could imagine something janky like "npm install &amp;&amp; git checkout package-lock.json", but I feel like there must be a more idiomatic way of saying "give me a clean install of this project's dependencies for development?"</p>