Lock Fomatto dependency to commit SHA
Add .gitignore to remove node_modules from repo