package.json with core dependencies