package lock json version 3