Freeze node module versions (client)

[de-code]

Currently the version within the client use a range that should include non-breaking changes. But that's not always the case. Even if using fixed versions in the package.json wouldn't be a guarantee that transient dependencies aren't updated.

Consider using shrink-wrap to freeze node module versions.