Update package.json

no ssh dependency - http instead