Code `require`s packages that it does not declare in its npm dependencies

[dpbricher]

src/b-privacy.js calls 'require('secp256k1') src/to-checksum-address.jscallsrequire('keccak')`

But those two packages are not listed in the package.json's dependencies.