yarn creates yarn.lock (whereas npm creates package-lock.json). They both use package.json with the same structure (but with different algorithms).

Install

You should follow the official guide.

# check version
yarn --version
# 4.1.1

• For yarn version 1

Remove

Official: yarn remove | Yarn

# Remove a package
yarn remove <package>

Check

Official: yarn info | Yarn

• For yarn version 1

yarn info lodash
yarn why lodash

# npx like?
# No, just use npx!

Update / Upgrade

Official: yarn up | Yarn

• For yarn version 1

# to the latest release
yarn up lodash

# with confirm
yarn up lodash -i

# with version
yarn up lodash@1.2.3

# all packages inside
yarn up @babel/*

# all packages containing "jest"
yarn up *jest*

Versions

• For yarn version 1

yarn version patch # 1.0.0 -> 1.0.1 (fixes)
yarn version minor # 1.0.1 -> 1.1.0 (new features )
yarn version major # 1.1.0 -> 2.0.0 (completely new APIs)