Update package.json

lock version numbers