learning how package.json works now