create a npm tmpdir and use it to install