don't get confused reading package.json dependencies

This is necessary to get 
https://github.com/xtuple/xtuple-extensions/pull/187
passing, which is necessary to get that whole repo passing.