It would be nice to produce some explanation how its working, so we better understand if its the right tool for us. For example: does it also work with package-lock and shrinkwrap.json ? Will it manipulate files?