npm is the Node.js package manager. The package.json file describes the project: name, dependencies, scripts, and module type. npm install downloads dependencies into node_modules and pins exact versions in package-lock.json, which you commit; node_modules is not committed.
Example
npm install express
npm run test