if you also declare a dep in BUILD on node_remote_module, you get Pants checking your package.json against it