package.json: fixed version (?)