Update package.json to specify version ranges

This will ensure we automatically pickup bug and security fixes, but the
API compatbility will remain the same.