version bumps, npm version pin (and update)

fix most of #15