Move dependencies to package.json