Validates package.json