update package.json for dependencies