add license.md, validate package.json