# notes - pinning dependencies in package.json files