package.json

This is where you can see all the used plugins and dependencies. As you import plugins, you will see in this file lines such as: "cordova-plugin-geolocation": "^4.0.2",

where it means 'accept any version 4.X.X'

Patch releases: 1.0 or 1.0.x or ~1.0.4

Minor releases: 1 or 1.x or ^1.0.4

Major releases: * or x

package-lock.jsonpackage-lock.json package-lock.json is automatically generated for any operations where npm modifies either the node_modules tree, or package.json. It describes the exact tree that was generated, such that subsequent installs are able to generate identical trees, regardless of intermediate dependency updates.”