Pinning socket.io and socket.io-client, since they are under very active development