package.json: add license