support version ranges in the url

Return the max satisfying version
clean up time versions
views: account non-string scripts commands
you may not delete npm