Use fixed version numbers for non-dev dependencies in package.json