npm expects 3 number semvers