npm github deps: get latest tag if none provided