Update package.json

add `which` to dependencies