Lock buster.js devDep