I am trying to lock node and npm version in my javascript project to ensure other developers have those