npm/hoist-lockfile-2