maybe npm should just have its own json format