Ideally package.json should not be included in the theme. Currently, package.json is being used to pick up the posts_per_page data value which determines the number of posts that should be shown per page.
This can be rather confusing, instead there could be a config file (say,config.json) from where we can mention all the configurations (like posts_per_page,image_sizes etc) required for ghost theme.