add .npmignore and rejig dependencies