fix deps in package.json