Update package-lock.json if present

[job13er]

When switching from yarn back to npm, it seems package-lock.json tracks the version number as well, so we need to update that, probably by running npm install if it's present, before we commit the changes to package.json.