Understand why a dependency in node modules is different from package-lock file and causes errors