Be stricker about npm module versions