add a package.json to describe dependencies