[BUG] `node_modules/.package-lock.json` contains `lockfileVersion` 2 instead of 3

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

npm install creates node_modules/.package-lock.json with "lockfileVersion": 2,.

Expected Behavior

As per https://docs.npmjs.com/cli/v7/configuring-npm/package-lock-json#lockfileversion npm v7 and later should set lockfileVersion of that hidden lockfile to 3.

2: The lockfile version used by npm v7, which is backwards compatible to v1 lockfiles.
3: The lockfile version used by npm v7, without backwards compatibility affordances. This is used for the hidden lockfile at node_modules/.package-lock.json, and will likely be used in a future version of npm, once support for npm v6 is no longer relevant.

Steps To Reproduce

mkdir test
cd test
npm init -y
npm install vue
grep lockfileVersion node_modules/.package-lock.json

Environment

• OS: not applicable (macOS Bir Sur 11.6, macOS Bir Sur 11.6, Ubuntu Focal, Ubuntu Focal)
• Node: not applicable (v16.13.0, v15.14.0, v14.17.5, v14.17.5)
• npm: any after v7? (v8.1.2, v7.24.1, v7.22.0, v7.0.0)

Start by reproducing the npm install vue sequence and inspect node_modules/.package-lock.json, the only artifact named in the issue. Trace the npm CLI path that generates this hidden lockfile, then verify that the result uses lockfileVersion 3 and that the relevant tests cover the behavior.