Pinned versions for all deps in package.json

To me, this is important, because we're making an on-premise solution. I want to be be sure, for a release, everyone is using the same code.

Pinning the dev dependencies may be going too far, but it is safe,