Pnpm (a very popular npm replacement) makes completely locked packages easy and natural and ultra fast:

https://pnpm.io/cli/install

Benchmarks:

https://pnpm.io/benchmarks

pnpm is so laughably terrible compared to Cargo it's not even comparable in the same breath.