package.json review