Validate package.json