freeze uglify-js dep at 1.3.4