package.json dependency cleanup