Comment by 3np

That (and anything else relying on the lockfile) won't take effect for users who install the package from the npm registry, unlike changes in package.json.