fix dependencies

Merge pull request #3 from abbudao/add-package-lock

fix: add package-lock.json

Use fingerprint64 to hash the cache key

Merge pull request #1 from abbudao/fingerprint-64

fix: use hash 64 to dimish chance of colision