put exact library versions in package.json