add package.json and fix merge-attrs lib

merge-attrs is not a fucking module when you randomly couple it to
ignore things you decided were important to some other dependency