bad package.json