Factor out dependencies and third-party libraries into package.json

[flaki]

Factor out third-party dependencies (codemirror, pep etc., even pif) into separately installed build dependencies via package.json.