improved the pkg.js tool to be able to lock down versions of both fifo and joyent