package.json: use exact versions of NPM modules - fixes #132