sort dependencies in package.json