fixed package.json url for helmet