Only install packages at the top of repo, and if you get a package-lock.json delete it and the node_modules folder in that package.