add main key to package.json
read from stdin + accept --help
shell escape external commands properly