avoid npm install new dependencies to keep frozen