package.json with dependencies