Pin all npm packages to exact versions. Fix bug 960102.