Should the react-tweet version in package-lock.json be manually updated?

[sudarshang]

I cloned this repo and ran npm install. Running this command updated the package-lock.json file

-  "version": "1.4.1",
+  "version": "1.4.3",

Looks like we need to bump the version in this file also when we bump it in package.json