Lock node and npm versions.