make sure npm is not used in the client