Now there are lots of info of the difference. it's cuz of specifying of version.
But here is the question. why don't we just put everything into the package.json? There is vague explanation about that but it doesn't satify my wonder. I still can't figure out the reason. If you know, plz share that knowledge. Thank you in advance!