fix: npm-friendly deps