add engines to package.json, update deps