node_modules package-lock.json sandbox.js