package.json: fix varint dependency