package.json
setting up some housekeeping, third-party deps, etc