move dependencies from submodules to package.json
replace ISC with GPL-3.0