fix a package.json dependency