Fix dependency source to allow unauthenticated installation through npm