update deps and npmignore