package.json: Use caret ^ for deps