yo: remove package-lock.json (#397568)

pkgs/by-name/yo/yo/package.nix

@@ -12,7 +12,7 @@ buildNpmPackage rec {
   src = fetchFromGitHub {
     owner = "yeoman";
     repo = "yo";
-    rev = "v${version}";
+    tag = "v${version}";
     hash = "sha256-twV5vmQ5loR8j9guf0w5DG4sU4BQYz22GjqjsUkqE4U=";
   };
 
@@ -20,11 +20,16 @@ buildNpmPackage rec {
   # once yo gets a new lockfile upstream, we can go back to regular
   # `npmDepsHash` and remove the `postPatch`.
   npmDeps = fetchNpmDeps {
-    src = ./.;
-    hash = "sha256-Fjt9/341lXW7YvyZVyAUMMcDITwyQxyG5WBgR9lJUy4=";
+    src = fetchFromGitHub {
+      owner = "yeoman";
+      repo = "yo";
+      rev = "96ebb14020a7f3f10699b3f88eadfa063a9e6b07";
+      hash = "sha256-wMxH9Er+gb6rsSEgmH0zA4d6yvP2PSpsV+A0nBTIxBI=";
+    };
+    hash = "sha256-7TAH4Im+H7fbjI0xUxYZficcFQNZbweK2U0hGCZV+lQ=";
   };
 
-  postPatch = "cp -v ${./package-lock.json} ./package-lock.json";
+  postPatch = "cp -v ${npmDeps.src}/package-lock.json ./package-lock.json";
 
   dontNpmBuild = true;