try to put the exact version, or with bugfixes, like: `"log4js": "0.6.x".

If not, a 0.7.0 that might change the API will be installed, and you do not want that without testing ;)