chore(bpmn-moddle): remove unused indirection
chore(package.json): pin dependencies