[npm] tidy up depedencies