What is the correct way to use package-lock.json?

Question

Node.js

Everyone knows that it's a useful thing, it fixes package versions, it needs to be committed, it can't be deleted, blablabla...
Today I encountered a problem for the first time - npm installit ran with an error on the server until I deleted package-lock. All local development takes place on Ubuntu 16.04, the same Ubuntu is on the server.
What was it?
How to use it correctly, besides how to commit thoughtlessly? Does it need to be updated periodically?