package.json: sort dependencies