If package-lock.json is present, don't want to run npm ci

### Expected Behaviour
I want to run `npm install` instead of `npm ci` as my `package-lock.json` and `package.json` are not always in sync. Moreover, it would be better if we could provide a script option in `node_modules` comparator too just like custom comparator.
### Actual Behaviour
Run `npm install` or my custom script if `package-lock.json` is present.

I'm using node version 14.

Start by finding the node_modules comparator and the existing custom comparator option, then inspect how package.json and package-lock.json trigger npm commands. Reproduce the case where the lockfile and package manifest are out of sync, and verify that the selected npm install or custom script runs instead of npm ci.

Written by the indexing model from the issue text.