Update package.json to specify version ranges

This will ensure we automatically pickup bug and security fixes, but the
API compatibility will remain the same.