package json with versions