chore: update npm dep patterns
chore: add lockdown for dependency locking and verification

Closes #1