added explicit versions to package.json