remove extra deps hash in package.json