I deleted it by accident and have made many changes to package.json since. An npm install or npm update do not generate package-lock
package.json
npm install
npm update
package-lock
This is answered in the comments; package-lock.json is a feature in npm v5 and higher. npm shrinkwrap is how you create a lockfile in all versions of npm.
package-lock.json
npm
npm shrinkwrap