Require explicit package versions

The caret flag for semver covers a _very_ broad range of versions, which can lead to unexpected failures. We should specify exact versions or at least stick to the tilde flag to prevent this. We can do this because these are devDependencies only and thus don't break other packages.
Toggle iframe rendering of components