moved todo to /doc
updated todo
updated package.json to fixed versions of dependencies. what if they updated something and suddenly something doesn't work? that would be terrible. :( we need tests.