use npm version that heroku is happy with