package json version range syntax