fix package.json deps, npm install