VERSION PINNING 

We are currently not pinning our versions in npm.

Since we run npm install on every build, it is possible that code we have never ran is being published.

Even though we gate our publishing with test suites, this is still a must fix.
