first pass at package.json