Allow a package.json to be used to specify version dependencies using semantic versioning, and automatically update the relevant package-lock.json.

It should be possible to use

but a lighter weight option on eclcc to do the same would be better (especially once you have nested dependencies).