add package.json for deps