lock down nodeunit devDep