version(package) lock the npm dependencies.