Update package.json

forcing versions of xml parsing libraries.