fix: correctly resolve relative paths from package.json

Closes #41