Fix package.json after naively ordering deps