npm/lockfile-pinning-bun-fixture