fix dependencies and bump for npm publish