Lock down deps
Merge pull request #54 from mojotech/sjs/fix-tests

Lock down deps