Lockdown dependencies in the package.json file.