update npm dependency