specified dependencies in package.json