Add patched metadata to package-lock.json about patch-package

[ds300]

Yeah it might make sense to offer a script for doing this if it is a common use case.

Is it kosher to alter a package-lock.json? At least the yarn lockfile supports comments, so that shouldn't be an issue.

[iwasrobbed-ks]

We're open to using yarn as well, so either would work.

It seems like package-lock.json doesn't have any integrity checks since patch-package modifies the source tree after a fresh package install. Since the lockfile is re-generated each npm install, modifying it after the fact to act as a cache checksum should be safe (and it didn't barf on a "patched": "hash1234" key that I added as a quick test)

[ds300]

Closing this due to inactivity. Should be pretty easy to do in userland too.