ripping out lockfile as a dep