npm packaging and dependencies