fix: issue #7892 prevent package-lock.json creation without package.json

fix: issue #7892 prevent package-lock.json creation without package.json #3409