package.json: Fetch specific versions

Using the 'a.b.x' notation doesn't work well on heroku
which caches packages, so the latest and greaters is not
guaranteed to be fetched. Use specific version to avoid this.