moment dependency in package.json