Does NPM offer a way to check in your resolved dependencies? While it would brick updates to dependencies, new clones and builds would work fine.