Apache 2.0 licensing in package.json