diff --git a/.gitignore b/.gitignore
index f969a2c..dc53d89 100644
--- a/.gitignore
+++ b/.gitignore
@@ -27,4 +27,8 @@ vendor
 temp
 tmp
 TODO.md
-package-lock.json
\ No newline at end of file
+
+# Only apps should have lockfiles
+npm-shrinkwrap.json
+package-lock.json
+yarn.lock
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000..43c97e7
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+package-lock=false