node's own require reads package.json even without using npm