keeps our package.json