Lock dependencies

The old versions of npm don't support ^version ("Compatible with version") format.