actually, DONT allow no package.json