* fix: refactor sign.js and related tests * fix: remove unused dep * fix: update package.json correctly
