package updates for npm