flesh out package.json