latest npm is too new for heroku