Hard to reproduce older build environment

[saschanaz]

So today I tried reviving #13574 (#26906) and faced dependency problem. TS's package.json marks every dependency as latest and ignores package-lock.json, so it's extremely hard to build with older commits.

Why can't we have normal semver for deps and use greenkeeper to constantly update to latest deps?

[RyanCavanaugh]

Doesn't seem like enough people are running into this