Pinning npm version dependencies