add a final option
pin deps
add package.json