pretty much everyone uses package.json now