Deciding on correct dependency states

[thomasrussellmurphy]

Currently, https://david-dm.org/hacsoc/lulu shows that we're up to date with everything except redis. Notably, everything other than redis uses the version requirement >=, which seems like a poor plan, particularly given that this has caused issues earlier due to node.js/io.js splitting and reconverging. What dependency specificity do we want?