remove mkdirp from package
lock down module dependency versions
remove mkdirp