Update deps, add `engines` to package.json