Issue #18: pin versions

We don't want our build process to rely on stability of remote masters. Hence, I've refactored the build scripts and pinned the latest stable version for each dependency.