package.json w/ deps