version lock the node modules