pin execjs version to 1.4.0