step 2: npm install