Specific versions in package.json and .npmignore