even a package.json is pushing it