Issue 5856 - Pass --no-package-lock argument to npm install

ensure_dependencies.py

 #!/usr/bin/env python
 
 # This Source Code Form is subject to the terms of the Mozilla Public
 # License, v. 2.0. If a copy of the MPL was not distributed with this
 # file, You can obtain one at http://mozilla.org/MPL/2.0/.
 
 import sys
 import os
 import posixpath
 import re
@@ skipping 253 matching lines @@
 
         # In case a package.json does not exist at all or if there are no
         # production dependencies declared, we don't need to run npm and can
         # bail out early.
         if not package_data.get('dependencies', False):
             return
     except IOError:
         return
 
     try:
-        cmd = ['npm', 'install', '--only=production', '--loglevel=warn']
+        cmd = ['npm', 'install', '--only=production',
+               '--loglevel=warn', '--no-package-lock']
         subprocess.check_output(cmd, cwd=target)
 
         repo_types[vcs].ignore(os.path.join(target, 'node_modules'), target)
     except OSError as e:
         import errno
         if e.errno == errno.ENOENT:
             logging.error('Failed to install Node.js dependencies for %s,'
                           ' please ensure Node.js is installed.', target)
         else:
             raise
@@ skipping 132 matching lines @@
     args = parser.parse_args()
 
     if args.quiet:
         logging.disable(logging.INFO)
 
     repos = args.repos
     if not len(repos):
         repos = [os.path.dirname(__file__)]
     for repo in repos:
         resolve_deps(repo)