npm being bossy with semantic versioning