Blacklist based on package.json too.