Upper bound for package:js

Robust against future breaking changes.
Merge pull request #2 from sethladd/patch-1

Upper bound for package:js