package.json: remove dependency key dup