add version numbers to package.json

“latest” is not reliable enough.