clean up package.json dependencies