Lock down npm dependencies to specific versions

## Lock down npm dependencies to specific versions

This effectively makes package.json work like composer.lock.

### Acceptance Criteria
1. None

### Tasks
- None

### Additional Notes
- None