Explicitly list derby version in package.json