package.json: add license, fix url