npm is required by `substance --update`