remove peerDep; version lock roots
Merge pull request #1 from carrot/package-json

remove peerDep; version lock roots