bumping package.json