Create package.json

trust but verify