This was using `python` which is not always available

Also re-export package-lock.json for the format from npm we currently
have in theia