lock node.js version