Specify dependencies using pessimistic version constraints.
Add npm-shrinkwrap.