Escape pkg.name correctly in app/index.js