npm package json lock version