introduce package.json to manage dependencies