fixed underscore-string dependency

package.js is for meteor packages (core), smart.json is used for atmo packages like underscore-string. Downloading this packages from atmo fails prior to this patch. (feel free to confirm :)