NPM dependency in package lock is wrong

Question

I have 2 private projects (Project A and Project B) that make use of a private library (Library). All of these are hosted