dependency typo in package.json