But why is it needed? Package.json is always there. Shouldn't the `node_modules` folder be the dep, since that's thing the decides if `npm install` should be run or not.