npm: adding repository field to avoid warning msg