pinned node and npm to preferred versions