added locked log4js into package.json