update npm requires, package.json