naive linter for npm's package.json