Yes, it is considered best practice to commit both package.json and package-lock.json to version control to ensure consistent installations across different environments and team members.