setting dependencies in package.json