update package.json dependency