Pinned versions for all deps in package.json