Specifying exact versions in package.json