Add major pinning version for dev dependencies

I think that in the long run, continuous integration is better than
avoiding dependency breaks, but not everyone is comforatble with that
approach.

Author: jdesrosiers

package-lock.json

@@ -28,9 +28,9 @@
     "vfile-reporter": "^8.0.0"
   },
   "devDependencies": {
-    "dotenv": "*",
-    "eslint": "*",
-    "eslint-import-resolver-node": "*",
-    "eslint-plugin-import": "*"
+    "dotenv": "^16.3.1",
+    "eslint": "^8.47.0",
+    "eslint-import-resolver-node": "^0.3.9",
+    "eslint-plugin-import": "^2.28.0"
   }
 }