use package.json instead