more accurate dependencies in package.json