fix package.json urls