add dep to package.json