Should the react-tweet version in package-lock.json be manually updated?

I cloned this repo and ran `npm install`. Running this command updated the package-lock.json file 

```
-  "version": "1.4.1",
+  "version": "1.4.3",

```

Looks like we need to bump the version in this file also when we bump it in package.json