removing protection from package.json