improve behavior when package-lock does not exist

[Farenheith]

when package-lock does not exist, anypm behaves really badly and slow, as it need to run npm to create the package-lock and, just then, follow with default logic.

It'd be good to understand if there are any different strategies that we could take to make it faster