diff --git a/.gitignore b/.gitignore
index 2c616c66da..b93ec0eef4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,8 @@ console/TestCases
 github-deploy-key
 github-deploy-key.pub
 node_modules
+
+# Only apps should have lockfiles
+package-lock.json
+yarn.lock
+npm-shrinkwrap.json
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 0000000000..43c97e719a
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1 @@
+package-lock=false