Lock blake2s-js at 1.0.3