add .npm, packages.json and smart.lock to version control