Dependabot is unable to create an automated pull request - Instructions Unclear

[phonomenal]

Describe the bug
A clear and concise description of what the bug is.

Step 4 https://github.com/githubtraining/security-strategy-essentials/blob/main/responses/04_add-dependabot.md

Is asking a user to view the PR Dependabot created but this is not possible as there is no Package-lock.json...
https://github.com/githubtraining/security-strategy-essentials/blob/main/responses/04_add-dependabot.md

• 

To Reproduce
Steps to reproduce the behavior:

1. Go to step 4 "Add Dependabot to your repository Fixes from a full run-through #4" in Issue Fixes from a full run-through #4 that will be opened
2. Attempt to view PRs, there is none created by dependabot.

Expected behavior
A clear and concise description of what you expected to happen.

• A PR should be shown as closed created by dependabot

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: [e.g. iOS] Mac
• Browser [e.g. chrome, safari] Chrome
• Version [e.g. 22]

Smartphone (please complete the following information):

• Device: [e.g. iPhone6]
• OS: [e.g. iOS8.1]
• Browser [e.g. stock browser, safari]
• Version [e.g. 22]

Additional context
Add any other context about the problem here.