Matter of taste: I would provide the path to package.json instead of the folder that it's in, so nobody has to guess which file was attempted to be read.