Explicitly make node_modules depend on package.json

[lalomartins]

should prevent build failures when package.json is updated (e.g. new dependency added) but a stale app.nw (or a stale node_modules?) is used anyway