fix package json deps locations