package.json update outdated packages