pinned packages to fix for new npm update