package.json: lock versions for jscs, range_check & jshint