Update package.json to lock down major version numbers of certain packages