Why did you pack package.json and package-lock.json to xpi? I see  but as I understand the extension does not use them.