update `package.json`