Locks down npm dependencies a bit.