fix: lock license plugin version

[huozhi]

Resolves #686

temp workaround on require.resolve usage from deps

[styfle]

Thanks! This looks like a downgrade (2.3.16 to 2.3.11) according to the lock file.

Is there an upstream issue we should be following?

[huozhi]

The usage of using require.resolve on plugin side is introduced in versions >= 2.3.12, so I downgrade to 2.3.11. This unexpected upgration is introduced in #674. previously ncc is using 2.3.0. so I picked the latest patch version works for ncc (2.3.11)