fleshing out package.json