fix dependencies in package.json