made dependent package versions explicit

[psnider]

I had trouble running the quickstart because of: #186

Both of these commands now work with a fresh git clone and npm install:

• npm start
• npm test

[googlebot]

Thanks for your pull request. It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

📝 Please visit https://cla.developers.google.com/ to sign.

Once you've signed, please reply here (e.g. I signed it!) and we'll verify. Thanks.

---

• If you've already signed a CLA, it's possible we don't have your GitHub username or you're using a different email address. Check your existing CLA data and verify that your email is set on your git commits.
• If you signed the CLA as a corporation, please let us know the company's name.

[psnider]

I signed the CLA

[googlebot]

CLAs look good, thanks!

[wardbell]

Thanks but your PR is pre-RC6 and we do not want to pin the npm versions as you propose.