add repository field to package.json
Respect bounds property on source if available.