npm install not creating a new package-lock.json

There might be a file called .npmrc which can contain

package-lock=false

which will cause the package lock file to not be generated.

In theory you could also have turned on npm config set package-lock false globally (change to true to turn on again), but that’s less likely to happen unintentionally.