upgrade npm package