Lock down devDependencies