Locked all packages in `package.json`

[ghost]

This will help with some concerns of security. npm install is much like playing Russian Roulette when it comes to CI and project replication. It is better to utilize the package-lock.json functionality.