Use npm shrinkwrap to lock dependency versions