Working out how dependencies work in package.json (seems OK now)