bumping npm version changes everything