package.json with more specific dependency versions