handle invalid npm dep names
cleanup on exit