dependency fix, npm bump