Update package.json

[boygirl]

@kitten @sofiapoh Is there a reason for using an exact version of buble?

I'd like to be able to pick up this commit https://github.com/bublejs/buble/commit/3a1e5d158d371362681e5765f224d5331fb9b2d2 from the latest release. Prior to this commit, buble (and therefore react-live) was being published with an untranspiled dependency (regexpu-core). I found this out while working on the renature docs. react-static throws an error about es6 syntax in the bundled app.

[sofiapoh]

There was a release of buble after that pinned version that added massive dependencies or broke something else, I'll take a look at the situation with it now but it's been a difficult dependency and we should look at alternatives potentially

[tomByrer]

@sofiapoh I don't know what you use buble for, but MDX uses a forked version, buble-jsx-only, since this PR

Edit: don't use buble-jsx-only at this time; seems to not tree-shake well, causing the /dist folder grow 10x.