fix package.json warning and add `npm test` script

closes #5