add js-yaml (3.0.x) dependency to package.json