add package.json back
pin deps
Release 1.0.1