Update package lock to v2

[grant]

Currently our package-lock.json uses v1. Recent versions of node/npm use v2, and sometimes automatically update, causing unnecessary diffs.

We should just update to v2.

[grant]

Fixed with #426.