Depending on your package manager, the shrinkwrap file may be called:
Some package managers use the term “lock file”, although it has nothing to do with file locking.
Every package manager creates a shrinkwrap file in each project folder.
This file should be committed to Git.