spec/dummy/package-lock.json contains a .yalc/shakapacker entry at 9.6.0-rc.3 which is a local development artifact from yalc. This should not be committed — the lockfile should only reference registry-published packages.

This entry can cause incorrect dependency resolution for anyone running npm install from the repo.

Found during PR #914 review.