package.json: fixing for public access