fix dependency in package.json