package.json: fix missing deps

This adds the `once` and `through` packages which were missing from the `package.json`. It also (unintentionally) changes the order in which dependencies are listen, which `npm` does automatically on install. I hope this is helpful. Thanks!