add package.json
fix deps