Clean up boostrapping, dependencies moved into package.json