Safer npm script