get all dependencies in package.json