package-lock.json pnpm-lock.yaml bun.lockb .gitignore