package.json vs. package-lock.json

Photo by Caspar Camille Rubin on Unsplash

What is package.json

What is package-lock.json

Do we need both ?