Use package.json for all dependencies.