fix deps as to not break npm shrinkwrap