allow npm dependencies