can we please just freeze our dependencies already, npm install shouldn't be a game of roulette