more explicit stuff in package.json