dependencies saved in package.json