Use version range for through dependency

This reduces the size of installs with multiple `through` dependencies (read browserify).
I used `>=` and `<` to not break older npm installs with `^`.

My personal motivation is slightly different though: npm seems to have a bug in dedupe and this change would work around it (see https://github.com/npm/npm/issues/5025).