Prepare for npm publishing

- [ ] Add `node_modules/` to `.gitignore`
- [ ] Stop tracking `node_modules/`
- [ ] Trust the compliance of semver among dependencies and stop pinning version numbers