Is there a way to lock an npm dependency without `deno.json`? - Deno