Why didn't you check the logs as the first thing to understand what's happening -- a standard operational practice?

And then to prevent this, you just lock the dependencies via a lockfile -- a well documented solution.

This is just another amateur "javascript bad" post.