please pin the sax dependency

[defunctzombie]

https://github.com/Leonidas-from-XIV/node-xml2js/blob/master/package.json#L36

If sax ever updates in a breaking way, future installs of versions of this module will break for your users. The best approach is to pin the exact version which you have tested with and published with. If in the future you wish to investigate issues with a version, not knowing what version of sax was being used will make very difficult.

[Leonidas-from-XIV]

I didn't think of that, but I see your point, so I'm pinning it at a version that I tested it with.

[defunctzombie]

Thank you for caring :)