package lock json gitignore not working