more info in package.json

I ran `npm init` on tar-stream which added, among other things, the license to package.json.