I've narrowed down the issue to the OS npm is run on. I'm currently on OSx. When I run npm install on my local machine, it creates a new lockfile. When I push that lockfile to production and run npm install in production, it modifies the package-lock.json file.
However, if I install it on my Vagrant Ubuntu machine and push it to the production server (Ubuntu), the package-lock.json remains unmodified. How can I make it so that it stays consistent across operating systems?
Edit: npm version is 5.3.0 on host machine, virtual machine, and production server.
Diff of package-lock.json when originally run on Mac OSx, then npm install on an Ubuntu machine: https://paste.laravel.io/0MGNa