update with frozen versions for npm + node